Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: 5JmnTxl3f92BsSO0ZcERkWDkdLMpdSvDMl1mgMELOD0=
Subject key identifier: 6A:42:02:DB:C6:00:E9:13:A6:5D:E6:6A:72:4C:B4:6B:E7:7F:99:0A
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 01974A7AF4514A87FBF59935CDEF76DED022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 048F
Signing time: Sat 07 Jun 2025 13:01:01 +0000
Manifest this update: Sat 07 Jun 2025 13:01:01 +0000
Manifest next update: Sun 08 Jun 2025 13:01:01 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: cUmvxnSnteE5iTZCjC089l+fgW1lGi2mUwUXYP/11SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:f4:51:4a:87:fb:f5:99:35:cd:ef:76:de:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Jun 7 13:01:01 2025 GMT
Not After : Jun 8 13:01:01 2025 GMT
Subject: CN=6a4202dbc600e913a65de66a724cb46be77f990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:78:3a:7e:cb:54:ed:f3:f5:c4:6e:3a:27:
e6:ec:28:f0:f5:33:f9:ee:13:65:76:af:28:04:a2:
27:c8:ad:b6:14:81:18:0e:fd:37:56:cb:c1:6a:0f:
c4:5a:61:db:ed:32:d9:06:12:90:fc:3a:64:4a:7c:
e0:0f:d0:32:a4:b0:f3:47:d9:13:aa:37:1a:1f:76:
b1:47:9a:e5:eb:77:0a:a3:07:b3:5c:db:56:7a:2b:
88:46:38:5b:1d:19:c3:0d:2d:95:46:98:14:be:19:
40:20:66:9a:08:c7:77:ea:06:99:68:92:3c:dd:bd:
5a:76:fb:c7:72:2e:3d:55:20:44:94:0a:e3:b4:a3:
fe:a4:19:ed:91:7d:6a:71:6a:eb:b0:de:40:9b:4c:
84:dd:0f:bc:ea:2f:9b:43:df:4a:09:26:96:6b:30:
56:67:35:13:c3:f8:ff:18:f3:45:dc:a2:ef:fb:4f:
a5:18:02:fe:79:c7:b8:d8:92:fd:98:10:85:71:14:
37:1e:61:7d:b4:6b:51:01:41:21:4c:79:d0:b5:bc:
c8:52:23:bf:56:52:3c:ba:90:f9:0d:91:ef:cb:b3:
f3:a9:51:df:99:7f:e7:7d:3b:66:5e:c1:77:28:aa:
b4:07:cd:e1:a2:a1:1d:56:16:51:8a:05:94:14:fd:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:02:DB:C6:00:E9:13:A6:5D:E6:6A:72:4C:B4:6B:E7:7F:99:0A
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a6:84:b4:bc:0f:21:07:7a:69:b7:dc:01:97:2e:99:70:6e:
de:87:cb:f1:fd:43:6e:ed:c2:5d:5b:dd:7c:16:10:d0:7e:67:
ae:4e:de:5f:2d:01:fb:10:1b:ef:69:71:f0:cb:d3:a2:d0:26:
7e:a8:68:a8:f3:fc:48:9a:9c:3a:eb:a4:e7:a5:f8:ad:0e:6a:
ce:b7:e1:ac:24:a6:49:5f:bd:f0:07:c0:b6:27:7c:3c:34:7b:
f2:9f:92:6c:1d:93:20:d3:fc:81:78:1e:0e:f1:b4:e9:d0:34:
62:c5:d7:cd:d0:c9:e7:32:78:e9:78:7f:d4:7d:bd:fc:15:7c:
aa:46:98:98:8c:7c:59:40:8f:5f:86:b1:cc:a6:24:f3:01:4f:
cb:fe:ab:5f:3b:17:d9:db:f0:38:a1:48:6e:70:c6:b2:22:e4:
96:b4:95:c7:34:76:f7:93:13:19:88:ed:01:6a:4a:44:ef:04:
11:e8:40:0d:aa:eb:aa:7f:73:52:94:10:45:b8:0a:f0:7f:bd:
85:83:4f:5b:9f:64:b4:0e:48:ca:01:d5:d6:c8:a6:8e:dd:c3:
98:36:2f:1b:02:e8:de:8a:39:2f:b4:54:97:2b:fb:de:e8:4d:
12:27:ae:29:51:86:7f:c5:13:4d:a2:d8:2e:11:6e:a8:bb:d4:
22:72:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:37 2025 by rpki-client