Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: i2xy6cC7a0PQKEhd9M+DCirr6CKfYIxCePJB4J0kESg=
Subject key identifier: 0B:DF:68:89:25:79:BE:51:A5:8A:DE:C3:A4:18:40:E3:DF:7F:9D:29
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 01975046D285C97E6F4753DB818A27A01AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 16:01:48 +0000
Manifest this update: Sun 08 Jun 2025 16:01:48 +0000
Manifest next update: Mon 09 Jun 2025 16:01:48 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: 5oLrWEMCHfzK6q1ETRKVOyDLt+/K8gmAnKfW/ZlIVN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:d2:85:c9:7e:6f:47:53:db:81:8a:27:a0:1a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Jun 8 16:01:48 2025 GMT
Not After : Jun 9 16:01:48 2025 GMT
Subject: CN=0bdf68892579be51a58adec3a41840e3df7f9d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:c0:29:29:ab:ea:2d:57:5a:8d:71:27:fd:
38:a3:58:53:6f:07:19:a2:0d:80:0a:d0:9f:aa:3a:
5c:82:a9:9c:b3:c4:67:73:9b:a2:4c:ea:87:69:16:
ca:51:d4:cb:e1:b9:66:5d:36:9b:1a:09:85:a6:d6:
fa:d4:09:06:1b:61:3e:28:37:d2:4f:16:18:e4:89:
fb:1a:c7:43:e1:e2:8f:e1:bd:58:04:ac:1d:ed:a0:
da:f4:13:69:97:18:9d:fc:9e:fe:f4:bd:bc:53:b9:
e5:a3:90:1a:a6:21:9c:9a:72:a4:4a:21:e5:73:1b:
11:7c:fc:d6:ae:f0:6e:b9:c1:4e:da:08:53:bc:09:
5d:7f:90:96:a7:b4:2e:af:f3:05:75:5b:9b:ea:45:
28:03:40:2b:38:7c:76:35:5c:c2:97:fb:26:96:bb:
5b:99:d6:2d:b4:b7:10:ca:53:11:45:19:88:61:1d:
31:22:dd:9a:10:99:10:d0:78:77:b4:d6:a0:a7:34:
e3:a8:d8:c5:7b:38:bb:12:99:36:d9:cb:65:4a:6b:
3f:b5:1a:c2:20:54:f6:99:21:0f:8d:1e:7a:c2:c3:
33:0f:b3:ea:06:9c:e5:2f:b6:ee:c7:2f:27:a7:8b:
18:ec:67:8b:5b:41:e6:1a:31:2e:7d:ac:f7:20:f6:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:68:89:25:79:BE:51:A5:8A:DE:C3:A4:18:40:E3:DF:7F:9D:29
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:15:f0:bc:c4:b3:c7:a3:ad:d4:39:9d:d2:56:d7:86:84:
9c:6c:ac:71:ad:a6:8c:ea:92:74:30:66:64:42:4c:04:f7:ac:
47:8b:85:b1:67:3c:e3:cb:5c:c5:6b:6e:da:a6:d0:5b:19:ae:
e4:f5:25:85:94:91:53:e5:63:7b:c0:fb:95:70:75:a2:50:80:
be:a1:49:df:af:3d:2f:b3:b6:61:7f:18:f2:21:97:a2:22:bb:
bc:00:9a:e1:e3:05:86:76:4a:6a:f6:bd:e0:ba:d6:bb:65:90:
76:c3:78:78:d2:3b:e3:13:69:46:39:1b:b7:27:b2:e8:e5:05:
2c:b8:65:27:07:43:ff:69:3e:81:7b:b4:de:44:1a:8e:21:73:
3d:75:3b:a9:57:7e:bf:f2:7b:68:ae:fa:e7:9a:a3:1f:40:9d:
36:74:e6:cd:86:0e:d4:c5:43:56:6c:0a:e7:a2:5d:55:49:36:
f5:05:b0:65:f9:bd:f8:a1:16:45:81:fa:ce:93:83:04:75:44:
eb:e9:43:e7:a3:33:40:6f:1f:fa:d2:4a:29:41:25:fc:02:ee:
fb:22:21:17:22:03:64:b3:c0:37:1e:29:29:0f:be:b4:08:4d:
3f:45:23:d0:58:bc:ca:01:98:ec:a3:25:a3:ab:23:64:3c:89:
6b:dd:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:56:07 2025 by rpki-client