
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: HYhg3Pt1aXAjwb+FhPJzZWq9j/RImEEi1MSK448b5Lc=
Subject key identifier: 4C:55:76:8F:09:0E:60:04:B0:85:CF:51:E1:47:3B:BB:2D:49:C2:03
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0197469D9B203AC28B62F846E4603DDBC630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 19:00:23 +0000
Manifest this update: Fri 06 Jun 2025 19:00:23 +0000
Manifest next update: Sat 07 Jun 2025 19:00:23 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: sF9J/kuZHuTQLeashdbC2rNzZkXiYLS3z7MqN0Y9I0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:9b:20:3a:c2:8b:62:f8:46:e4:60:3d:db:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Jun 6 19:00:23 2025 GMT
Not After : Jun 7 19:00:23 2025 GMT
Subject: CN=4c55768f090e6004b085cf51e1473bbb2d49c203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:f9:74:34:b0:e9:42:a0:30:b5:97:de:34:
85:e0:c7:f8:a0:e9:1d:c3:cc:19:09:58:f3:7d:6b:
87:b6:9d:b5:1a:cc:57:26:46:7b:11:0b:55:8a:78:
64:3a:30:e2:44:d7:05:db:c6:e7:01:5d:ba:cb:e9:
68:88:29:80:1b:ca:2f:0d:4d:d6:ae:b6:4f:25:11:
08:6c:42:b1:f6:d2:ef:39:ae:34:18:30:a9:62:f8:
1c:cf:00:fe:4e:3c:ee:fd:46:f8:1b:f3:2d:04:a1:
b2:b3:61:ba:72:cb:a7:fb:ed:08:11:77:a3:bc:d5:
5f:8f:80:a0:58:1a:4f:5e:c9:d1:ac:a7:eb:50:89:
69:7d:32:0e:c7:a0:9a:73:60:4c:8e:a2:ca:49:39:
5e:62:4a:71:9f:5f:33:d1:22:b5:e4:49:35:2d:fb:
2d:e1:b1:87:2a:56:cf:db:d7:25:ac:63:36:11:b9:
b4:d5:ee:1e:b0:fb:a6:9a:9b:d0:58:6c:b5:0d:c1:
c9:cb:2c:e6:d1:fe:7f:44:ec:76:a9:f9:4b:ba:a8:
84:6d:d1:24:d1:ff:1d:4c:ed:49:9a:5f:16:c4:13:
52:ae:f7:6f:20:e9:f2:5f:0a:49:0c:d1:a6:7b:e7:
d7:69:7c:30:a9:f8:d5:80:10:d0:c3:d8:cb:f3:50:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:76:8F:09:0E:60:04:B0:85:CF:51:E1:47:3B:BB:2D:49:C2:03
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2a:02:9d:a9:18:dd:1a:d5:4d:cf:9f:71:bd:76:88:5d:96:
23:69:26:dd:e0:f3:56:f8:7d:7e:6d:77:0e:fb:1a:09:77:01:
e8:3e:61:f9:13:0a:9a:01:20:40:1c:e9:a1:ed:b2:91:37:3c:
08:ae:a3:82:ec:f2:35:e9:17:f2:89:f0:cf:91:d2:61:d2:35:
3b:8d:e0:72:e2:b1:a9:9b:a8:e2:02:c6:88:2f:bb:0c:a8:c6:
58:71:62:c7:c9:79:e4:bb:ed:7d:19:3a:48:f1:63:ff:4b:08:
1e:07:2b:16:5f:a6:60:52:cb:f5:cb:1b:45:69:3a:f7:8a:aa:
d5:ca:86:65:a1:dc:08:6f:69:39:75:b5:7d:33:50:40:ba:59:
fd:ec:f7:eb:db:f2:95:a7:50:df:28:35:77:28:c0:cc:92:ef:
d4:b1:67:6c:4f:e4:67:9c:08:a8:dc:69:e0:c8:e1:46:74:7f:
54:98:d3:38:89:cb:1f:17:61:3a:3b:55:07:bc:ed:53:2d:b9:
74:c6:bc:bb:ca:69:41:e5:02:b3:01:62:05:6a:52:08:e5:5a:
e5:bd:12:a1:41:f2:cb:f3:00:fe:64:be:d6:a7:fa:0a:66:2c:
c1:ee:4a:db:2d:d2:98:10:20:46:7c:1b:21:a1:51:a9:49:71:
e1:5b:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:56:59 2025 by rpki-client