Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: ZFVm6GTDFQIy2xmZhOPokrqGlT2P5F+XroX/aCkOXjM=
Subject key identifier: 9A:78:28:B8:08:B0:A0:98:8E:BE:6E:0C:2F:9D:B6:AA:D1:6C:F1:C1
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 0197469E45BECA87D865F1106DC41DBCF67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 19:01:06 +0000
Manifest this update: Fri 06 Jun 2025 19:01:06 +0000
Manifest next update: Sat 07 Jun 2025 19:01:06 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: z9eWq3cvDggdtH5gnGXPep5V8R0VNj6XajpqEvVrGkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:45:be:ca:87:d8:65:f1:10:6d:c4:1d:bc:f6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Jun 6 19:01:06 2025 GMT
Not After : Jun 7 19:01:06 2025 GMT
Subject: CN=9a7828b808b0a0988ebe6e0c2f9db6aad16cf1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:fe:29:60:c3:76:fb:cf:52:8e:33:cf:e9:
a6:da:4e:71:ea:72:85:9b:24:4c:0a:09:dc:08:c4:
0a:65:45:30:f2:fd:8c:e1:d3:b1:db:5a:32:6b:e7:
bb:b7:90:a7:37:fa:95:96:28:ef:af:ba:42:de:0f:
14:5b:96:e3:b8:77:81:a1:09:1a:d4:c1:5c:85:4e:
52:6c:13:a0:9b:39:aa:f8:f6:f4:4b:5a:0d:61:bd:
a8:6e:dd:4d:14:20:5b:07:ad:cd:b0:26:b0:d4:5b:
94:04:2f:11:6c:e1:f7:f7:31:20:bb:e2:ac:c8:bd:
d5:b5:33:0d:b5:39:f2:41:41:48:91:8e:b5:95:fc:
f6:c6:22:ee:81:c2:ae:c4:46:a4:2e:d6:b6:2c:1a:
27:e3:f9:de:3f:3c:c9:10:31:f6:57:a1:76:cd:69:
68:da:a3:07:a2:cb:b1:bb:8f:f6:a0:a9:47:4c:23:
47:ae:86:67:09:ac:df:4f:0f:c1:69:1e:d6:f0:eb:
f5:82:f4:32:d3:86:2d:a0:90:43:ab:12:68:39:d6:
71:98:fa:7f:b2:8e:f2:be:c5:42:f8:b5:ce:2d:fc:
21:8a:2e:d1:ca:f4:b3:8c:32:a3:e7:27:16:bd:a9:
17:b3:03:0f:15:fe:39:41:11:4b:5b:1d:95:3f:4c:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:28:B8:08:B0:A0:98:8E:BE:6E:0C:2F:9D:B6:AA:D1:6C:F1:C1
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:40:87:ad:3f:4a:93:a8:a4:4c:38:8d:f8:35:51:68:a6:
7d:2e:66:2f:8d:9c:a9:61:7d:3e:7d:cc:cb:1f:af:6f:5a:7b:
ee:bb:c3:8c:1b:39:4e:19:21:2f:4d:50:6c:55:24:4a:44:06:
46:d7:e5:d9:a0:ca:f6:56:52:29:b5:c9:12:8e:40:00:19:81:
7b:fa:6e:56:44:8c:55:3c:b5:a7:67:f6:43:8e:97:66:1c:60:
b5:77:07:cf:47:20:f2:db:91:11:b1:6c:a3:0b:8f:f8:f6:29:
a1:1f:aa:cd:83:93:35:6d:14:c1:c2:05:73:d4:0c:56:d3:ed:
8b:a1:ec:3e:36:9b:03:08:56:02:6d:7f:8f:a4:4e:bb:f2:cf:
d6:85:c1:78:47:91:cc:0f:c3:47:5a:5b:03:8f:a5:3e:d1:4d:
a3:85:2b:8a:3a:c6:75:74:49:1b:08:9b:87:1e:05:a8:f9:15:
f5:a1:9c:10:28:00:61:65:6d:9b:c3:31:c2:64:70:e6:94:22:
a4:15:6f:48:b6:9f:78:dc:05:4a:e1:13:44:45:1f:f3:e4:07:
7d:19:18:ba:7a:44:41:c1:9f:fe:4a:12:4d:a9:ad:b7:ab:c0:
80:1b:9d:06:d1:96:78:c4:20:89:f2:2a:cd:06:88:cb:b8:d5:
b4:af:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:10:57 2025 by rpki-client