Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: 7HX2windDTIf1zCYp0XmlmgIzWI1navC5AmYApB6PU0=
Subject key identifier: 18:42:CC:E2:17:60:A9:E2:B7:7F:D5:39:1D:74:F0:AB:2E:CB:F6:08
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 0197488CC82A166266A56DD52BB436CEFC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: 1/EGPI5SyFAFJn5whr0eOObFpPds6QyYIOSnXl3sbPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c8:2a:16:62:66:a5:6d:d5:2b:b4:36:ce:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=1842cce21760a9e2b77fd5391d74f0ab2ecbf608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:f3:65:df:66:08:5f:8d:36:f8:d2:e4:8b:
ec:93:de:c4:08:25:1c:d6:3c:7a:61:6a:a0:da:2d:
51:1f:11:5c:eb:d6:4e:ef:9b:40:ce:76:2c:66:3f:
52:fb:bd:77:db:78:dc:67:1e:01:fe:a9:b5:28:ab:
2f:44:0f:54:51:65:ab:95:c0:ed:77:8b:06:57:06:
df:2b:48:b3:4a:a5:52:95:a5:40:17:fd:a3:0e:78:
96:51:55:54:0e:2d:45:ee:8b:ac:52:50:7a:6f:22:
c7:03:52:f1:32:c7:01:3e:92:cd:33:d4:4d:54:75:
2c:44:00:1f:bf:4f:9e:84:f6:c8:22:6f:c1:96:03:
ac:c7:a3:f5:e2:0f:3d:7d:c4:5a:3c:6f:22:ba:48:
6a:1b:b7:51:21:25:9b:e8:bb:64:5e:be:a6:9a:96:
ab:b7:62:78:96:9c:62:57:92:10:61:1c:a7:fc:1c:
40:42:ec:56:4b:9b:0e:9f:3c:34:cf:76:ed:b3:26:
d1:93:5a:67:38:4c:0e:3b:26:0d:52:e8:36:5b:bf:
a3:bd:28:16:a3:43:5c:62:44:a6:6c:42:3e:d5:69:
ef:eb:a0:48:cc:99:75:76:19:fd:12:ca:35:36:ce:
31:ac:ef:42:bc:e2:9f:9f:aa:6f:76:92:36:ff:5d:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:CC:E2:17:60:A9:E2:B7:7F:D5:39:1D:74:F0:AB:2E:CB:F6:08
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5f:e5:ee:89:db:90:83:d7:0a:ab:9b:90:85:fc:16:d5:4f:
72:ce:52:94:16:70:29:8d:8b:2e:40:08:12:4c:a2:42:f7:fc:
5b:a0:3b:3d:a1:72:47:30:bb:f2:af:2c:cc:d2:0d:e3:48:20:
58:22:5c:c2:e2:29:51:d8:27:b3:a6:2c:aa:c4:01:88:ff:fd:
b8:86:a9:b8:c2:90:8e:2f:31:a1:7b:dd:ff:52:82:1d:b5:ef:
df:3c:fc:3d:a8:24:11:69:72:b9:e5:9d:a1:0d:b2:23:48:9a:
da:99:b9:fd:3a:c5:6c:bf:2f:1f:fd:91:43:94:94:a6:e4:b5:
10:86:fb:5c:87:ac:44:de:aa:6a:e1:48:b2:3f:b2:6f:69:04:
d2:09:ad:99:0d:9b:ae:87:4c:33:6b:4a:a9:23:10:99:38:df:
e3:ae:df:9a:7c:4e:fa:31:fd:e4:51:ec:4f:b4:5d:5f:cf:9e:
d2:ad:14:78:3f:fc:96:7b:95:1f:af:83:9c:26:72:91:aa:9f:
ee:51:88:58:7d:a2:b7:a9:fa:40:76:df:6c:f9:10:ff:d6:5e:
96:9b:2a:88:50:40:1b:15:34:91:fb:2b:76:cb:90:ac:8e:3d:
3a:27:43:0c:81:9c:92:43:1d:7d:fc:94:e9:3b:cd:84:fd:60:
61:ca:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:20 2025 by rpki-client