Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier: pU0UefRKR1Z7V25yAbPQw05fZ2eVHekNDzK6gftIgj4=
Subject key identifier: F7:9C:74:57:62:6E:42:56:CF:DD:CC:41:FA:C4:C3:D7:0E:24:BB:DD
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial: 01974A7AA9302115A26554C54E15952B29E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number: 0D1F
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: R3i6JErjQt/RphAIGJTwynHil6BpKfmZwzj+HLYMo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a9:30:21:15:a2:65:54:c5:4e:15:95:2b:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=f79c7457626e4256cfddcc41fac4c3d70e24bbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:8a:b7:a0:a2:6a:69:f1:61:f0:2d:52:73:
87:fd:c0:06:a8:05:45:23:ff:30:05:e4:7c:32:b4:
ca:66:be:4c:fb:10:fe:3d:bc:3c:ff:2c:e8:5d:70:
de:a1:cc:f9:7a:fb:0f:66:46:6f:ff:fa:24:68:f7:
12:a4:50:b1:57:98:43:6a:4b:74:80:c2:08:c7:a8:
1a:82:9b:da:43:e0:13:56:55:97:6f:51:48:b4:dd:
15:59:58:3f:78:3b:89:b6:7b:6c:40:c4:7f:bc:55:
0e:54:c0:0a:72:f1:ed:c5:d3:51:7e:d8:3c:94:cf:
51:df:1b:e5:b2:7d:59:37:91:d6:5d:d8:6d:17:42:
73:8b:08:cc:7f:90:08:6e:e8:f5:13:f4:ec:c2:59:
ce:8e:e6:71:a6:5e:54:87:ad:6e:52:c5:b0:d0:44:
9b:a0:01:f6:b9:b5:5e:29:eb:2f:49:01:65:22:dc:
98:12:40:1e:dc:71:2f:78:96:b5:60:17:26:1c:4e:
15:e5:17:31:64:f0:f9:01:f4:14:5f:51:63:5d:72:
93:2e:e7:9d:e7:30:e3:15:0c:b8:a1:58:d6:5f:9d:
dc:f8:22:d8:04:45:4b:25:7c:5e:0b:9d:90:dc:f1:
b1:f9:a5:d3:83:2b:7e:59:70:ae:e1:06:80:4d:76:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:74:57:62:6E:42:56:CF:DD:CC:41:FA:C4:C3:D7:0E:24:BB:DD
X509v3 Authority Key Identifier:
keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6e:46:a3:95:b2:38:9b:10:c2:58:a3:04:d9:b5:f8:ca:17:
24:dd:45:4b:57:92:cb:3c:51:c3:f4:82:c0:7d:c4:3b:07:48:
12:b7:de:ef:3e:a0:31:65:b1:d3:37:3b:e2:d3:57:02:b3:35:
ab:0c:62:5d:d7:d1:2c:8c:98:27:00:dd:f7:56:9a:5a:11:09:
52:af:8f:22:9f:a6:30:76:c2:99:3b:68:e4:0c:75:e4:96:91:
d8:c8:fd:38:96:0d:9c:cc:be:e7:56:ac:eb:14:f6:ef:7f:43:
d7:85:e7:0d:5d:00:3d:d0:fc:3c:49:26:4c:20:6c:a4:c1:79:
97:b2:e3:97:d5:d1:cf:5e:75:b7:93:1c:3a:35:54:69:65:63:
6e:56:04:f1:90:9a:a0:ee:cb:3c:c4:5a:1b:e5:26:c5:ac:dd:
b6:22:10:36:b5:5c:cb:50:65:81:f5:ff:8b:27:b3:15:68:e9:
81:bd:3a:f0:76:12:26:a6:ff:db:b2:7a:2f:3a:cb:86:5b:2d:
d0:8c:a3:7e:25:48:23:fd:dc:8b:43:d9:fc:f7:57:01:e1:9d:
ae:7c:ec:0c:38:34:61:46:33:a7:84:d2:61:d0:ce:1c:9d:7a:
10:53:86:d5:89:62:61:14:08:b7:28:9e:dc:31:35:bb:d4:96:
95:51:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:52:10 2025 by rpki-client