
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: b/HVrZTFb0IjNsMVlPNDng6afApDm2GgqTdCWvEAq1E=
Subject key identifier: 69:FA:F8:A2:4A:56:5F:74:AE:DB:5A:E0:40:F0:EB:0C:D8:0E:CE:0F
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 01974AE828A04F1AF5B6F8A2C0AB07BA8C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 0450
Signing time: Sat 07 Jun 2025 15:00:18 +0000
Manifest this update: Sat 07 Jun 2025 15:00:18 +0000
Manifest next update: Sun 08 Jun 2025 15:00:18 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: 3NYxjKCYmavbJgIDi/fAF1XtQ/qM+R+wJPnXQL7VZLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:28:a0:4f:1a:f5:b6:f8:a2:c0:ab:07:ba:8c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Jun 7 15:00:18 2025 GMT
Not After : Jun 8 15:00:18 2025 GMT
Subject: CN=69faf8a24a565f74aedb5ae040f0eb0cd80ece0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:fb:59:98:0d:87:36:3e:64:c1:01:bc:36:
05:9b:c0:8c:a8:92:6b:63:09:de:1a:14:1f:38:ce:
34:99:32:39:51:74:cd:11:5c:58:37:ee:43:06:71:
e2:fe:e5:80:fe:8a:23:00:1d:73:33:7d:81:ac:b8:
74:6d:39:4e:ca:16:fb:f8:12:f4:68:d2:8a:7b:dd:
e2:23:63:c4:af:a2:92:1a:04:63:66:a4:29:65:08:
2e:d8:de:03:9d:9c:f1:f4:2c:cb:97:ab:0f:45:ff:
a1:f8:63:4d:4c:23:eb:75:7f:92:70:4a:7a:d9:ac:
64:89:40:21:ef:e8:11:05:c1:b5:52:3c:fa:f5:55:
ef:02:44:31:d9:f1:da:28:ac:cf:7d:35:e1:4b:f8:
d7:00:94:10:92:1c:91:25:ec:78:c4:ea:5f:dd:f7:
b6:f8:b3:38:1f:56:2d:d2:f0:35:89:06:01:9f:a3:
42:9b:b0:dc:8d:ee:83:75:bd:d0:69:3a:6c:32:80:
2f:9a:d8:a7:5e:2a:b7:db:ba:3f:df:03:e3:b6:7a:
b0:80:e3:28:3e:29:f3:4e:f5:8e:d7:16:18:a7:2d:
a9:ba:9d:b5:6a:27:05:ff:39:a9:4e:93:a1:1c:eb:
27:01:66:c1:ec:05:c7:e0:bb:7a:00:c6:89:79:c5:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:F8:A2:4A:56:5F:74:AE:DB:5A:E0:40:F0:EB:0C:D8:0E:CE:0F
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:2a:ec:26:9d:04:06:6d:85:17:45:2b:9a:18:0e:66:d7:
5f:6e:ee:68:1a:06:f7:87:90:59:a1:ae:a6:4b:fb:cd:e4:d3:
d9:14:90:ed:0c:1f:f7:c3:32:ec:3c:e5:7e:b6:0d:1e:8e:4b:
21:66:22:e9:53:b3:13:21:63:e0:59:8d:3e:77:51:94:ac:a7:
7b:b4:bb:f3:44:df:1b:e0:dc:a0:4e:cd:23:07:1d:5d:a3:01:
ef:9d:d7:07:95:58:a5:ea:bf:d5:d4:3f:fa:a8:8a:3b:5d:23:
2f:52:fd:18:04:bc:5e:5a:24:49:7a:a6:e8:96:6c:2f:6e:e8:
27:9a:be:4d:7d:5e:fe:3b:fb:49:e0:02:e5:96:6b:f1:ee:fd:
8a:63:ac:60:c3:76:25:18:53:80:c6:16:b3:6d:71:0f:02:7f:
3d:aa:e0:8d:e3:8b:b9:d0:8a:ee:87:1e:eb:7f:75:b6:28:88:
97:b0:29:af:ee:4a:ee:cb:98:5a:19:38:37:f5:45:11:b4:1d:
07:7a:1e:64:33:8d:e1:9f:c8:ff:b7:af:e0:21:8f:79:9e:a9:
cc:ba:75:6d:92:22:97:69:23:6e:f3:4e:03:4f:2d:cb:c8:e2:
f6:d3:45:31:b2:58:ba:bb:27:81:e3:ad:55:13:8d:0d:07:f1:
34:97:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:12:13 2025 by rpki-client