
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File: j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier: xesvoYPobAWqqj8tO1vvXhU71AhmcKtUGtnh6aRx7n0=
Subject key identifier: 8F:8F:2E:D0:5A:1D:9E:A5:89:8C:A5:14:A6:E8:8D:65:9D:95:CB:61
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer: /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial: 0197488D2B7B575DAA2DF96F9DEC8156BECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number: 0EE2
Signing time: Sat 07 Jun 2025 04:01:40 +0000
Manifest this update: Sat 07 Jun 2025 04:01:40 +0000
Manifest next update: Sun 08 Jun 2025 04:01:40 +0000
Files and hashes: 1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: FVr062E6QROtdxxgz0pH+N/hcBkKnP/srgG9RO4pJGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2b:7b:57:5d:aa:2d:f9:6f:9d:ec:81:56:be:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Validity
Not Before: Jun 7 04:01:40 2025 GMT
Not After : Jun 8 04:01:40 2025 GMT
Subject: CN=8f8f2ed05a1d9ea5898ca514a6e88d659d95cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:b6:d0:af:c2:8f:68:95:74:81:ad:07:e1:
fb:d0:af:f1:32:c4:02:60:e2:e8:58:d4:9d:90:b1:
1a:db:44:53:8c:b0:9a:91:55:3a:9d:15:13:6f:f6:
bf:9e:b7:83:ea:bc:cc:0b:9d:00:e4:c9:94:f4:ee:
3d:25:3d:06:a8:4d:1c:7c:21:08:fd:a5:69:a4:18:
89:18:93:39:04:c1:bb:d4:d8:f9:4c:15:17:ec:d2:
24:04:56:b2:ea:c6:17:c4:4b:5e:4d:15:7f:58:d9:
7e:cf:b7:c0:21:f8:37:46:e7:de:f8:c4:3d:46:07:
97:80:50:04:27:c7:e0:b3:f8:06:a3:e3:11:38:7d:
e8:11:9f:aa:b4:a6:ef:13:ce:c4:d1:44:6f:63:76:
d1:11:ae:62:34:0f:0f:0f:98:91:69:e7:a0:41:7f:
e7:2c:9f:8a:79:29:78:4e:cb:09:26:21:ac:b2:3e:
05:8b:eb:96:4a:9b:66:35:3b:13:b4:5f:de:f7:4e:
03:3e:e2:67:51:04:8d:f0:e2:e7:c1:8b:cb:68:47:
04:b6:82:97:0b:72:b3:86:b0:39:87:b9:83:76:49:
0a:fa:be:5c:6c:91:b2:5d:ce:d8:2e:66:49:f9:32:
18:12:0e:69:40:7c:ba:64:2f:dc:7f:41:0f:d4:7c:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:2E:D0:5A:1D:9E:A5:89:8C:A5:14:A6:E8:8D:65:9D:95:CB:61
X509v3 Authority Key Identifier:
keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e1:38:15:67:61:fb:0c:06:67:ee:ef:28:5e:6c:54:a7:85:
72:b8:59:c8:dd:0c:03:80:bc:2b:1c:6a:99:f3:f5:9f:fa:28:
4f:07:08:13:e2:b6:52:b9:16:ca:4d:e5:25:61:70:79:8f:6b:
e2:ac:05:52:f7:4a:60:01:62:3f:a5:ad:a6:2c:79:1d:33:eb:
40:99:50:ce:74:3a:c8:28:81:23:b4:a7:e6:9e:39:aa:63:88:
05:d0:89:09:39:11:f1:12:da:7e:00:21:8e:37:07:8d:68:6a:
dc:1a:0a:c2:e7:47:ea:b3:df:17:d7:d8:59:86:f6:6f:32:d3:
47:54:ad:0a:0d:4e:a0:12:75:cf:05:c4:43:db:d1:66:d1:b1:
9a:14:6c:2a:2b:48:3e:0a:78:e5:47:46:ce:81:37:7d:5a:09:
67:b8:c7:ed:08:45:3e:17:c1:d1:5e:b0:1c:78:89:5b:2f:f8:
b5:e9:f3:b3:eb:cc:40:b0:ea:ef:dc:41:38:73:eb:32:de:08:
f4:c7:0e:fd:e8:a5:7f:21:54:c3:87:24:9d:ae:1e:2f:fd:55:
39:db:e1:fc:05:15:be:99:fc:52:9f:67:cd:06:09:4b:6c:1a:
37:45:78:39:bc:c3:98:41:2c:72:6f:d7:d0:49:8b:59:4e:5d:
98:a1:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:15:29 2025 by rpki-client