Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: XWAodK54cVtS2s/d92S038UcmCzyctRRw2Vzbw4J/xk=
Subject key identifier: 82:98:14:D3:86:62:DE:1B:1E:34:A4:D7:32:FD:3A:E2:F3:2B:16:4B
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 01974C69AFA2E0C6F78B854EEF74EB787C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 08C4
Signing time: Sat 07 Jun 2025 22:01:23 +0000
Manifest this update: Sat 07 Jun 2025 22:01:23 +0000
Manifest next update: Sun 08 Jun 2025 22:01:23 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: iy+C890QCfOYEXj8Sbq6w0USJvBOfRGLP4NNrfB3TUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:af:a2:e0:c6:f7:8b:85:4e:ef:74:eb:78:7c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Jun 7 22:01:23 2025 GMT
Not After : Jun 8 22:01:23 2025 GMT
Subject: CN=829814d38662de1b1e34a4d732fd3ae2f32b164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:f6:e8:e3:16:41:08:5d:5b:d3:11:89:9e:
3a:ef:65:30:3e:55:19:f8:fe:75:5b:22:36:44:ef:
8a:c3:25:8a:df:6c:4a:38:b7:7b:5c:40:1c:80:35:
80:19:4a:4b:f4:7c:06:5e:29:b2:06:96:ab:00:47:
64:eb:c2:cc:6d:1d:7e:ff:6c:0d:1d:9a:34:31:ae:
2b:2c:0e:75:29:7f:74:35:29:b8:3b:31:67:02:85:
a1:06:cc:6e:bb:f3:04:73:97:82:d4:44:ee:0a:4c:
90:ca:9c:88:0d:9c:77:59:21:33:aa:9f:bc:c1:bf:
33:fa:5b:74:07:a9:34:02:3c:18:59:96:0e:8a:08:
21:05:6f:34:7a:c6:b5:c0:ab:d6:3c:de:92:82:71:
e9:aa:4a:26:77:24:cb:76:4b:c4:10:fd:71:12:15:
fe:62:30:e9:6a:e6:c8:90:ed:c0:22:77:b8:06:85:
e4:e8:1c:ae:df:a8:f9:11:a7:91:3d:be:80:98:c4:
97:3d:6b:4d:4b:1d:84:57:fe:03:50:21:d0:6a:ea:
a0:78:f1:a4:e0:10:d4:fb:d8:2f:94:8f:fb:d7:e2:
21:14:1b:7e:f8:ad:d2:72:cc:0e:8f:1d:9b:fc:38:
2d:3f:d8:a3:d7:96:0e:51:b7:7a:b8:3c:69:a7:51:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:98:14:D3:86:62:DE:1B:1E:34:A4:D7:32:FD:3A:E2:F3:2B:16:4B
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:74:df:d6:62:51:6f:4f:3d:fe:ec:9d:33:6b:1f:75:c5:a4:
d1:6d:82:a7:28:06:7b:d3:ad:f5:c6:4b:56:b2:2e:cd:5f:2f:
48:74:08:4e:b6:97:97:01:71:30:97:7e:82:a9:55:4e:4f:bc:
19:c0:e4:f1:9a:9b:0c:71:8b:3b:ff:af:b6:da:2e:62:fc:40:
8e:c2:34:6d:da:4e:19:0c:cd:0a:4e:ba:cb:a3:17:22:ab:b3:
a9:5f:9a:86:f2:ac:85:e4:85:d1:57:08:f2:b3:fa:aa:a3:63:
0a:7b:82:b0:34:b9:11:d0:93:76:e8:ad:7c:95:fa:7a:91:b6:
3d:a5:90:df:ff:c2:34:ef:1b:68:63:3a:6b:56:c2:45:a2:03:
3d:76:8f:74:fd:4c:9b:4b:87:0f:54:ca:fb:26:ba:dc:7d:88:
a2:f2:de:f8:e1:63:0c:d0:9e:0f:fa:d0:7e:9f:a9:32:53:e5:
c1:05:46:67:03:c3:42:ca:5d:68:71:39:20:e8:0f:82:98:f8:
bc:1f:70:05:22:a9:1a:9e:d9:e8:39:0d:56:63:e8:6e:39:fe:
56:87:78:fb:40:e8:12:54:89:d6:13:51:30:1f:21:0b:97:1b:
2f:f9:ee:af:9c:ff:31:ad:6d:d6:37:f8:18:56:df:e1:9a:01:
94:b6:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:08 2025 by rpki-client