Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: 7BOeR5Yjk3ucjRD/V6qSlbqU8SC8abPdch+72n92Pf8=
Subject key identifier: 57:50:64:F3:DA:74:84:00:F6:E8:3B:78:5B:56:AC:2A:C0:9B:DB:EA
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01974D0E2579A6F06FB7612513E5C2A9BAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:01:01 +0000
Manifest this update: Sun 08 Jun 2025 01:01:01 +0000
Manifest next update: Mon 09 Jun 2025 01:01:01 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: llDF+fII7qcKTuQBs6vnS3Oc5c0IjgYfqBsxtpTETSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:25:79:a6:f0:6f:b7:61:25:13:e5:c2:a9:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Jun 8 01:01:01 2025 GMT
Not After : Jun 9 01:01:01 2025 GMT
Subject: CN=575064f3da748400f6e83b785b56ac2ac09bdbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:9e:94:e7:d7:5c:74:52:0f:a4:4c:66:db:
59:cf:97:6b:09:aa:d7:c0:8f:96:f8:c7:d8:a0:06:
4f:e4:51:09:82:bd:aa:56:83:45:56:3e:6f:88:ec:
fe:5f:64:ba:f8:dc:ac:b6:4a:9f:ed:f7:4f:4c:5f:
66:48:8b:e7:b6:b7:52:5b:7e:51:b6:d4:8a:6a:43:
08:1b:38:07:ff:d6:73:68:29:24:79:a1:cd:20:89:
c2:94:2b:03:49:70:21:e0:2a:3f:1c:98:0b:b5:68:
8c:4e:cf:bc:5e:fa:c3:a4:cd:d0:f8:9f:d0:51:72:
0c:b8:a7:f9:88:1d:a2:b8:da:ad:51:96:da:f7:2d:
18:d8:ac:75:80:1a:75:40:07:b9:a1:36:41:ae:1e:
23:7e:b6:f2:9a:f5:51:c5:65:4c:19:9a:1b:34:c4:
57:4b:1e:44:53:89:d2:9f:a0:0f:f0:80:31:27:30:
de:91:a7:16:06:4b:d9:58:36:a6:ee:76:d9:b9:e3:
71:9a:5f:60:94:20:b9:2c:3a:89:9e:91:b3:b4:6d:
47:2a:63:6e:6f:98:32:0e:e5:9a:a7:38:7c:d5:00:
31:07:01:58:0e:a8:ad:30:a3:2d:af:7d:8e:50:c7:
17:ca:df:4c:d6:11:76:9a:ed:2d:a9:0c:30:4e:f0:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:64:F3:DA:74:84:00:F6:E8:3B:78:5B:56:AC:2A:C0:9B:DB:EA
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:28:d2:91:5d:2a:dc:a1:90:27:42:3c:fe:96:2e:01:b5:71:
aa:7e:e3:e9:67:fb:01:62:2a:b2:a9:1d:ae:c5:a3:ae:d7:7e:
27:87:51:c3:2f:41:6a:4b:03:3f:40:87:c6:7d:6c:42:e0:24:
db:b9:5e:fa:25:28:57:c8:53:91:6a:08:7d:d2:17:90:71:8e:
ec:8d:99:c6:a5:1d:7c:5b:ba:c6:51:a6:a1:85:70:a1:63:ef:
2b:2b:9a:62:0c:51:79:fd:f4:8d:ba:1f:e3:fd:c0:37:14:8e:
8c:92:e9:06:1f:18:7f:97:5b:9b:ce:b1:29:4e:29:b2:e7:88:
fa:ac:e6:7c:7b:92:94:46:61:84:94:80:a4:d9:ba:ff:6d:c2:
19:39:f2:1e:b5:02:30:d1:3e:84:d8:a8:fb:16:ba:69:c5:89:
11:31:87:12:18:f8:e4:09:e4:74:d8:3b:9f:27:cb:5d:fc:02:
36:c9:b9:98:1d:bd:82:c5:ce:fa:cc:0f:b6:9d:34:0e:6a:1b:
5e:33:17:f1:e6:40:42:c2:18:bb:ab:82:55:5c:21:24:f8:8d:
e9:3c:79:11:92:d6:4a:6c:33:bb:0e:1d:1c:a2:ec:42:75:8f:
82:35:e3:fa:56:99:e2:0f:75:1e:72:5a:38:b8:51:ae:e8:dd:
c6:fa:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:03 2025 by rpki-client