Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier: LvlfAwVt6JyE6+WNwO9e/DXQrVW9i8mNbvNO3jcRXg8=
Subject key identifier: D7:33:C4:28:6F:F1:93:6C:26:CE:F2:93:79:2A:0B:E0:CB:61:BF:63
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer: /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial: 01974B1F88E5A3FC63FF5AB9D9A077BE56BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number: 03DF
Signing time: Sat 07 Jun 2025 16:00:47 +0000
Manifest this update: Sat 07 Jun 2025 16:00:47 +0000
Manifest next update: Sun 08 Jun 2025 16:00:47 +0000
Files and hashes: 1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: e7cP9tOwETrHI6Qb37iM3Z7T5O9YogQAqlE1gywCGtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:88:e5:a3:fc:63:ff:5a:b9:d9:a0:77:be:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Validity
Not Before: Jun 7 16:00:47 2025 GMT
Not After : Jun 8 16:00:47 2025 GMT
Subject: CN=d733c4286ff1936c26cef293792a0be0cb61bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:d9:c9:de:da:18:d6:80:d0:0d:06:9a:2c:
2c:64:cc:91:06:f7:8d:f4:6a:e9:0d:d1:21:60:a5:
32:55:ef:cf:00:66:e4:1a:19:1b:14:c1:98:08:9f:
4a:e4:3a:38:fd:33:93:ec:99:d4:44:ea:e2:60:22:
d5:79:b9:9a:02:a7:03:db:46:26:e5:62:c7:98:74:
35:d4:1d:f7:70:66:31:7c:53:a4:2c:fb:d5:6c:07:
ca:f1:4c:0d:c8:88:75:58:1f:f8:b8:c3:21:9e:8c:
4e:d3:36:be:33:4b:e9:f0:4c:fe:b9:1b:90:7c:12:
35:13:2a:28:13:3f:b0:8a:13:87:d5:8e:cb:1f:2a:
fb:4e:42:2b:d0:60:0a:6f:16:bd:87:0c:32:95:60:
5f:14:12:ec:41:5c:ec:ae:9c:64:5c:36:db:38:79:
74:dc:b5:08:03:2f:ed:ad:a5:5d:b9:94:14:b0:cd:
80:d7:4f:36:58:5c:77:75:6d:ff:a0:77:6c:58:75:
39:5f:1b:92:f4:4a:2a:c8:59:c9:2a:c9:23:d8:49:
91:a3:69:c1:33:e3:90:a0:fd:d5:d6:37:aa:33:8f:
85:a3:db:a1:bb:18:c4:36:e7:31:7f:6f:80:73:ee:
df:cc:87:bd:2a:30:4d:1f:c9:d1:0c:ec:25:07:eb:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:C4:28:6F:F1:93:6C:26:CE:F2:93:79:2A:0B:E0:CB:61:BF:63
X509v3 Authority Key Identifier:
keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:bc:d5:08:83:6f:78:8b:58:2e:5c:5c:d1:62:ed:d2:7b:
9a:b5:68:12:e9:8f:62:46:62:86:08:88:ed:63:b6:63:f0:af:
28:3d:08:ed:da:83:25:4f:01:b6:dd:13:7b:12:92:73:87:be:
e1:7e:52:0b:35:48:62:38:3a:74:ed:d7:ab:ea:04:7f:8d:81:
d7:1c:c7:66:3a:12:e1:de:51:e3:55:f9:9b:d8:74:f5:12:d5:
b1:6a:20:2a:9e:4c:eb:00:86:2b:68:50:2c:f6:2c:9c:00:f3:
4c:09:93:10:a2:b3:e6:b6:f9:b0:05:31:d9:d4:75:e0:b0:44:
aa:6a:75:ad:ec:1c:af:e9:c3:0d:58:d9:d5:77:03:55:ea:a6:
33:88:ec:db:a7:24:dd:22:f9:2f:a0:ef:e8:a2:9d:b1:80:84:
dd:5c:6a:c6:35:d8:a7:2e:f3:80:12:ea:5c:94:2c:51:8a:dc:
62:f6:38:41:61:32:9b:2b:27:9a:25:9d:f3:94:1c:5d:09:ed:
4c:e4:2a:06:34:93:9a:28:f2:ab:1a:ec:02:c9:07:ea:f6:b8:
d9:47:5c:51:9d:f9:2c:4b:94:54:8e:1f:cd:c2:27:64:f5:f7:
6b:32:3d:03:01:0c:b6:7e:57:81:db:88:e2:85:0d:77:cf:aa:
8d:1b:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:45 2025 by rpki-client