Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: 94tGxC5i8JSzxc5kLb3qGkofbI/z/F3tXj7Kz+3Nx+I=
Subject key identifier: AB:11:30:D0:97:FB:2C:4B:99:64:C4:3D:8C:B2:3D:1B:6A:03:4B:1A
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 0197469E826758582C0BB74C461215519C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 0711
Signing time: Fri 06 Jun 2025 19:01:22 +0000
Manifest this update: Fri 06 Jun 2025 19:01:22 +0000
Manifest next update: Sat 07 Jun 2025 19:01:22 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: Gsqf02jMhUK+Pn+iLXSUKTgmzpzIlYV5Ta1UXHELDX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:82:67:58:58:2c:0b:b7:4c:46:12:15:51:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Jun 6 19:01:22 2025 GMT
Not After : Jun 7 19:01:22 2025 GMT
Subject: CN=ab1130d097fb2c4b9964c43d8cb23d1b6a034b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:dc:05:16:14:a3:c4:27:25:78:19:c2:43:
13:b2:7e:46:9e:ff:31:f9:1b:dc:76:6e:06:3a:9a:
9d:fa:62:15:07:8c:7c:59:4f:9a:48:64:f4:84:7f:
a1:41:dc:dc:80:c6:f4:ae:ab:62:59:32:38:1e:53:
16:d1:40:53:b2:21:09:29:60:dc:10:e5:c2:79:c0:
ec:d5:16:2d:48:76:75:63:d7:b3:53:b4:0b:c5:dd:
43:b7:29:75:2d:f3:60:93:e8:b2:e3:8f:e3:b6:b2:
91:1f:fb:7d:ae:94:91:07:0f:d0:78:c5:3e:c1:2e:
bf:2f:18:e1:b8:b3:8b:72:55:2c:97:26:c8:fe:4f:
c5:68:d5:7b:ef:bc:63:2d:91:29:d1:6f:04:09:7e:
c9:0d:e1:56:1c:bb:33:68:21:97:b2:95:28:9b:97:
08:e2:a7:08:90:60:1a:33:73:80:1d:3b:03:31:9d:
8f:ec:d1:a5:ca:26:81:d8:37:58:46:b5:e6:bb:93:
b4:08:22:e1:30:14:0b:6c:a4:3f:00:ce:3d:0a:46:
b8:6d:26:f5:95:e4:f3:c7:0b:6f:2f:01:51:22:a8:
4d:da:15:5d:79:a2:38:b1:4c:4f:2e:e5:84:fa:28:
34:48:9b:dd:00:f9:fd:50:58:66:03:2b:b1:25:b7:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:30:D0:97:FB:2C:4B:99:64:C4:3D:8C:B2:3D:1B:6A:03:4B:1A
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6d:5e:e1:cf:b5:dc:81:75:9f:d4:2d:5c:a8:ee:4e:f3:84:
8c:e6:79:8f:dc:32:29:63:b8:ac:5b:ff:50:d4:73:ae:41:4d:
f4:ff:1f:5f:8e:45:bd:53:5c:90:6d:58:2b:40:e4:7d:5d:60:
16:73:41:cf:bb:7f:6e:c3:75:cd:23:9a:6f:22:15:9c:b7:d8:
53:fd:ed:83:fd:1b:b6:59:d8:d9:d8:65:77:ae:f2:68:9c:d9:
ea:3d:17:8d:f3:80:4a:b9:20:9a:7c:83:8c:61:ff:ba:6a:86:
fd:de:b0:f2:73:9e:ef:6b:1c:46:d1:55:40:b7:d7:7b:05:fd:
fa:ed:2b:cf:72:59:12:df:76:35:35:ef:9c:a7:9d:bf:e4:1b:
3a:f4:ef:64:e9:f4:9d:35:8b:66:88:1d:69:bd:9d:c3:23:97:
6a:32:7d:13:1a:18:18:18:05:8e:ed:88:a4:79:2b:3c:8f:d4:
5e:55:8c:a4:b3:15:3b:6b:3d:eb:1c:05:90:53:2b:c7:b3:a3:
42:bb:26:cf:dc:de:53:13:8c:2c:d8:a1:21:82:08:9f:26:ef:
90:42:15:7b:32:41:47:25:72:56:22:4d:0a:ab:26:d9:47:2c:
3d:52:e0:65:bf:b6:c8:b5:6f:11:f0:4d:e1:14:b3:20:5b:ea:
2d:10:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:25 2025 by rpki-client