Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: N26lq/XcJBtG2pIcipmqmBhETGJ6pPAmPr5u/Gz39Sk=
Subject key identifier: F7:DE:87:18:09:48:E1:01:2F:D4:3F:54:53:2D:B0:AB:DB:7B:14:7E
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 01974EFC0BF867401ADC587A53DE6ACA2495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 07A8
Signing time: Sun 08 Jun 2025 10:00:30 +0000
Manifest this update: Sun 08 Jun 2025 10:00:30 +0000
Manifest next update: Mon 09 Jun 2025 10:00:30 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: CYXiVdGmFZM0bnrOmKFwmuPL0kOMLkz+bT7iICvqhXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:0b:f8:67:40:1a:dc:58:7a:53:de:6a:ca:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Jun 8 10:00:30 2025 GMT
Not After : Jun 9 10:00:30 2025 GMT
Subject: CN=f7de87180948e1012fd43f54532db0abdb7b147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:ce:b1:16:78:aa:27:1c:fc:f3:e0:a6:c6:
2a:a6:22:7d:23:b8:9d:eb:fc:51:46:ab:7e:45:16:
50:5f:6d:0c:64:a5:ab:a2:83:a1:5a:79:1a:15:c9:
e7:b9:67:5e:c0:11:75:db:7b:f2:df:be:69:91:64:
bb:6d:40:d6:60:a2:f2:5c:3e:79:ed:b1:43:86:5c:
ea:4f:4f:c4:6f:64:83:87:a5:58:61:25:83:2e:8a:
f0:40:68:e9:2e:b5:91:43:50:f6:fb:14:14:1f:28:
04:7e:8c:42:12:55:6e:06:d6:1c:fe:25:b8:35:d2:
66:48:ee:1c:ec:ec:95:8f:7d:ad:2c:e8:36:3d:62:
99:16:27:dc:98:b2:be:2c:ac:bc:cf:7f:07:19:eb:
22:e7:4a:11:62:47:25:ee:ea:a6:c2:85:f1:8f:4e:
ab:e0:0d:9e:2e:46:93:dd:0e:3b:c5:b3:e2:40:e4:
8c:8e:44:f7:fd:5f:82:70:3a:dc:e3:14:5f:4c:1d:
9a:6f:55:ef:ce:0d:30:e8:89:dc:c6:f9:b2:ee:4e:
ed:6e:84:33:fd:34:97:cb:02:71:21:b8:fd:ab:f8:
fd:5c:2d:69:b6:c0:5f:f0:60:7a:0e:16:76:41:fc:
cc:bd:57:8a:f1:65:c1:b4:99:f0:dd:ee:71:77:55:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:87:18:09:48:E1:01:2F:D4:3F:54:53:2D:B0:AB:DB:7B:14:7E
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:04:74:ad:47:df:fd:c7:d4:f4:06:17:37:b5:dd:cf:f2:
f4:ac:12:e4:88:56:87:2f:8f:3c:76:a2:63:32:27:b3:27:53:
a2:06:fb:13:1b:63:58:07:26:aa:a7:20:df:1d:75:f4:12:a5:
4d:38:fd:c4:dc:27:de:2d:93:5f:b2:b8:5d:cb:30:4d:f1:72:
67:17:c3:b1:40:51:cb:bb:4d:b4:40:8b:86:d8:2f:54:9a:40:
8c:6c:2c:7a:bc:be:0f:3f:9d:27:4c:be:c9:6d:ac:f0:ce:f1:
c6:f4:24:ae:91:7f:cd:bd:2a:fc:0f:f9:7a:3b:46:2e:39:86:
64:cd:ee:22:83:1e:8f:ac:84:dc:f6:7d:3f:9c:b4:47:4d:ff:
cf:1e:0f:3b:55:dc:23:5c:fc:fd:85:cb:72:ce:d0:ec:e9:13:
28:bb:4e:93:35:f7:11:85:31:a1:7c:6e:01:9e:e6:35:93:d0:
d9:db:6b:88:c0:a0:6d:79:fa:ec:a2:e3:34:a1:0d:e4:10:18:
75:09:f0:d7:89:11:b0:60:ca:d6:01:28:0a:9c:ce:11:5d:b3:
60:11:1f:28:34:96:cf:1b:49:04:b0:6a:f6:ef:21:66:83:88:
40:95:38:1b:94:fe:62:7c:31:8e:51:07:26:53:40:47:e8:2e:
e3:a9:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:56:35 2025 by rpki-client