Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier: LXU+/a0Bimn44o1tkTLwTwpGPfUFj8IHyFI+ExnFHdw=
Subject key identifier: 38:8F:43:AA:A6:62:C8:6F:67:5B:C6:CE:E6:02:33:A3:D7:5B:48:23
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer: /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial: 0197469DEBC934CB7FC5D516E154015F471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 19:00:43 +0000
Manifest this update: Fri 06 Jun 2025 19:00:43 +0000
Manifest next update: Sat 07 Jun 2025 19:00:43 +0000
Files and hashes: 1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: bHieObisN9Dn7KnDjYYfsVDuqwqIU//dMCUY1HWueCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:eb:c9:34:cb:7f:c5:d5:16:e1:54:01:5f:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Validity
Not Before: Jun 6 19:00:43 2025 GMT
Not After : Jun 7 19:00:43 2025 GMT
Subject: CN=388f43aaa662c86f675bc6cee60233a3d75b4823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:ab:75:e9:e9:84:65:3e:c6:89:99:95:4d:
27:76:01:99:0f:36:2c:bf:dc:b6:bf:32:e1:60:53:
d4:27:5b:75:5b:93:cd:f1:2f:79:4a:a5:72:27:1a:
fc:ff:4a:48:8b:46:ee:dd:db:13:a2:5e:3c:2c:3a:
d5:32:d5:10:dd:83:51:32:78:5f:05:5f:3d:36:0e:
7b:80:28:c1:45:6c:2a:a6:00:14:30:5b:79:cd:ca:
ed:f9:fc:15:f1:1c:6a:cc:a8:8e:18:ce:3d:9b:fc:
20:17:30:49:37:f6:35:f2:3e:39:ef:9b:5b:0a:18:
c0:7a:ac:80:8d:b9:69:56:d3:42:4a:55:ca:79:55:
5f:8b:28:89:5c:98:59:13:6e:45:e1:74:76:62:41:
67:fd:d8:b0:5e:6a:a2:ce:e8:76:bc:b0:81:f5:57:
95:50:93:2a:9e:57:aa:03:b6:7e:ac:39:88:aa:96:
78:17:c0:6f:7e:60:c2:5a:81:31:bf:aa:45:c8:93:
a0:b6:77:7d:10:14:c0:09:6d:8a:62:b8:98:7a:2f:
51:65:22:cc:45:d8:47:61:56:de:21:d3:99:25:3e:
1b:46:58:41:44:7b:13:f1:8d:07:06:7f:14:36:e0:
8e:e9:f2:95:00:7d:d8:ab:b6:5a:3a:a8:46:eb:3e:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8F:43:AA:A6:62:C8:6F:67:5B:C6:CE:E6:02:33:A3:D7:5B:48:23
X509v3 Authority Key Identifier:
keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ed:29:ec:db:b4:df:49:c6:68:0a:6c:4a:92:12:d7:c9:e1:
b7:e7:9c:96:27:25:04:89:06:b6:02:48:4b:59:97:b1:be:80:
b4:7e:cc:0f:ee:b0:dd:7f:fe:8d:d4:a8:10:dc:eb:eb:62:da:
ce:eb:dc:b0:ce:87:96:03:39:0e:43:1a:9c:bc:1f:8b:a0:97:
c8:87:c2:aa:b4:4a:d1:a3:d9:3f:e5:62:00:f1:fd:1b:b0:c1:
68:c2:30:98:03:6f:68:ff:cd:91:09:4c:4b:7e:7a:c5:eb:65:
e9:90:2d:6f:96:53:c3:ac:3a:b6:10:3b:e4:4d:e6:13:ba:78:
58:90:84:c8:c4:2c:3a:79:07:a8:ed:54:bf:87:86:ae:56:01:
d4:b0:5e:85:26:d2:f9:23:e1:67:fe:a4:69:b0:fa:65:a7:ea:
c6:f3:7d:61:ea:39:9a:f3:b5:f5:09:4b:20:c8:fd:cf:53:2b:
02:0c:bb:50:da:ee:e4:39:18:cd:cc:4b:76:5d:d9:bf:29:cc:
a9:32:72:df:9c:7f:b5:58:f9:ea:96:fc:8c:af:ba:d4:e3:53:
07:82:71:72:69:c9:97:09:d0:a7:28:f5:ae:48:b3:32:2f:06:
ee:40:59:25:63:27:9f:a9:a6:57:94:1d:af:44:c7:c1:2f:ed:
15:f9:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:36 2025 by rpki-client