
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: b+ZIEGRwRQ75DaYJRatSX2vkKjhbdQvs0Ll94Pg9ovY=
Subject key identifier: A7:22:4A:78:91:67:0F:1B:AB:CF:94:EE:64:DE:A3:89:BC:EA:11:48
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 0197C9F1349266C597D02AA039059DB2BB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 15BA
Signing time: Wed 02 Jul 2025 07:01:57 +0000
Manifest this update: Wed 02 Jul 2025 07:01:57 +0000
Manifest next update: Thu 03 Jul 2025 07:01:57 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: 83JfL6bn2OPPDqyJWUP4ITaULc1gJtP9TVzvli0JfZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:34:92:66:c5:97:d0:2a:a0:39:05:9d:b2:bb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Jul 2 07:01:57 2025 GMT
Not After : Jul 3 07:01:57 2025 GMT
Subject: CN=a7224a7891670f1babcf94ee64dea389bcea1148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:b0:09:e3:49:ab:07:c1:71:b5:bd:0c:69:
a6:ef:ee:50:0d:67:94:f3:fe:f8:87:b6:8a:f2:0a:
3f:ca:76:83:51:76:a5:00:66:a5:b7:b9:d5:34:15:
1a:47:39:a4:25:4d:30:a6:5e:cd:24:44:81:e7:95:
2d:d6:fe:23:ed:2c:f3:9a:69:91:68:0c:16:65:a0:
bb:52:6c:5e:54:3f:c2:b4:17:32:7d:03:b4:95:3c:
f9:f3:3d:16:c2:61:1c:92:40:3e:c4:d2:f8:ff:3d:
41:75:39:48:64:1e:9e:cd:b9:19:00:ad:c3:cd:26:
6d:50:70:0d:69:db:aa:59:f0:45:23:b4:d1:07:6e:
b6:cc:47:e6:5a:1a:37:f3:5a:f2:07:9d:f8:4b:8b:
72:8c:13:35:10:34:04:80:33:8d:39:7f:3e:30:c8:
cb:3d:55:df:4d:a9:bf:48:f5:a7:64:7a:8e:0e:21:
c0:9f:37:ad:af:50:7e:a2:ef:d0:5e:ce:fc:c9:6e:
ab:5e:bd:29:95:b0:71:e9:7c:95:07:2a:8e:e4:b4:
cf:d1:58:2e:94:0b:90:6b:ed:eb:a6:34:86:50:e8:
bb:a7:55:0e:4a:e7:50:a7:2f:a0:3f:26:e0:c4:89:
fe:b7:b9:30:6e:ec:f8:9b:23:00:52:c5:55:c0:55:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:22:4A:78:91:67:0F:1B:AB:CF:94:EE:64:DE:A3:89:BC:EA:11:48
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:02:95:e3:31:cd:17:d8:52:37:b6:68:27:06:6d:35:24:
d9:81:57:41:8f:9a:ae:30:e4:df:e3:ca:05:7e:df:f9:8b:25:
a4:ba:87:f3:a6:ba:5f:72:e0:0c:41:37:c9:46:8d:e5:4c:62:
13:4b:f8:97:cb:47:f6:61:8f:6d:e3:0e:54:33:6f:60:3e:75:
1b:ca:a8:1d:79:88:e8:9a:6c:db:7a:e6:19:19:34:53:b8:a2:
d3:ef:67:fb:6c:ad:90:14:25:01:36:52:2e:d5:2c:0b:bf:fe:
25:28:ad:d2:75:fd:bd:f1:f0:47:40:2a:97:eb:dd:fa:ae:8f:
ef:5f:ce:0b:42:28:28:c3:05:97:08:57:a3:26:88:79:01:db:
c7:84:8d:2d:14:ec:61:68:0a:20:f6:0e:8a:43:d9:6c:6c:54:
16:03:12:63:35:70:6a:e9:6d:a9:3d:56:60:fb:83:32:16:14:
e6:b2:04:02:b0:a4:12:b5:9f:02:72:91:22:c1:59:52:e9:95:
2b:98:53:05:85:44:48:29:a0:d1:aa:91:6f:06:c1:05:af:c2:
a9:b9:59:27:dc:ad:61:ca:d6:e1:a3:c3:26:8e:2a:e1:ed:42:
32:ce:d8:12:8e:9e:01:5c:42:35:dd:ff:96:4e:2b:1e:52:ae:
ae:8f:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:15:50 2025 by rpki-client