Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: qLILsxvZtQ8HwQli+JU99L9v6xfA+HTjIyhDkGHvwTE=
Subject key identifier: 23:A2:06:4E:A3:57:D4:9D:A6:68:D0:D1:B6:D2:11:95:69:BD:12:1C
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 01974AE83E7A2FEF3AD1A00B32D5C6E3760D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 15:00:23 +0000
Manifest this update: Sat 07 Jun 2025 15:00:23 +0000
Manifest next update: Sun 08 Jun 2025 15:00:23 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: Zlk67vtRxfLlnNp3V7Y3V+GMY1WHTXM3czckQreSCbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:3e:7a:2f:ef:3a:d1:a0:0b:32:d5:c6:e3:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Jun 7 15:00:23 2025 GMT
Not After : Jun 8 15:00:23 2025 GMT
Subject: CN=23a2064ea357d49da668d0d1b6d2119569bd121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:f1:f7:89:03:dd:56:8b:16:62:c8:35:4a:
fd:b4:af:50:d6:e8:70:32:eb:e3:27:c5:a3:79:5b:
8b:d3:17:0b:0a:6a:0f:a9:e2:a3:4f:a1:65:cd:4b:
78:22:77:b0:43:e6:64:e7:51:e7:eb:99:8d:74:71:
02:75:e7:ff:89:ae:06:44:0c:b0:00:db:37:71:8b:
3c:1b:af:36:51:28:7c:3a:bf:f8:a1:9e:ca:ce:a7:
6a:6f:68:de:2a:d2:df:ae:f8:7f:09:c1:5a:49:6d:
25:6b:df:8a:31:bc:88:22:76:f6:d5:a6:07:ca:a3:
f8:a3:dd:7b:b8:99:b5:3f:ee:e0:f8:74:9c:c8:0d:
6d:e6:07:94:20:26:88:d3:b1:5b:19:de:b9:2b:c3:
09:c9:a7:49:e5:6a:80:34:91:30:39:21:16:28:2d:
7e:8b:51:ae:ad:7b:24:8b:c7:f7:6b:63:40:e4:4b:
cf:02:b8:f1:02:84:d6:f0:4b:88:a6:fd:26:e6:3a:
0d:e7:72:c5:dc:a9:c2:39:a9:df:c8:b2:7e:e3:cf:
69:c2:b4:64:40:d1:77:11:af:b4:b1:1b:ef:62:3c:
64:54:79:95:b2:89:19:5b:5d:88:47:e2:3a:74:b0:
7e:04:21:f0:57:e8:6d:58:a7:5e:86:d0:cc:c0:75:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:06:4E:A3:57:D4:9D:A6:68:D0:D1:B6:D2:11:95:69:BD:12:1C
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d5:bd:25:18:17:c2:e9:f9:25:9b:76:ed:b9:78:d8:51:42:
fb:5e:23:e8:b7:64:35:1c:4d:fe:d5:48:24:61:56:28:f1:76:
8c:db:4b:fe:c8:6f:a0:46:ed:10:b1:12:ee:4d:be:72:c9:32:
2c:b8:33:68:49:2c:b0:dd:3b:01:80:fe:8b:97:ee:05:25:58:
06:46:55:0f:7a:94:ab:18:0d:11:ba:7c:db:d8:8a:0f:58:e5:
97:ee:f1:06:0a:b8:f4:77:ef:d3:46:8c:56:77:d0:38:03:21:
f6:86:fe:7e:d8:3f:66:53:90:74:c6:30:74:44:62:5a:20:8f:
1d:dd:bd:57:87:be:86:fe:8a:8f:e9:8b:fe:0e:56:b2:69:bf:
33:bf:0c:f0:71:c8:e7:cc:7e:76:d3:d8:46:ca:a2:bd:27:e8:
00:a9:54:44:db:7f:13:ff:f9:74:89:36:cd:aa:a8:db:67:7e:
db:cf:36:ff:9e:83:59:b7:ec:b3:56:08:bc:65:cf:3e:5a:33:
8c:5e:d0:81:6f:52:43:2a:d1:e4:12:69:1a:88:14:7f:f9:b8:
51:98:fe:4d:cb:f8:df:2c:fd:4b:d8:33:dd:69:3d:48:de:2a:
4b:a3:4a:9c:5f:92:11:7e:5d:3d:b5:44:37:be:a4:b8:50:55:
ae:86:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:56:35 2025 by rpki-client