Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
File: jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft (raw, json)
Hash identifier: vQ/Kd5Mpyj53oIkh0iUDRIpzl4wg5Nqhfy9BAwZi0/U=
Subject key identifier: D5:FF:23:87:BB:53:72:E7:B6:D9:80:C2:C2:59:79:82:C1:1E:EE:C8
Authority key identifier: 8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
Certificate issuer: /CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Certificate serial: 019750EA5F39802ED8A91EE3499702342C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 19:00:26 +0000
Manifest this update: Sun 08 Jun 2025 19:00:26 +0000
Manifest next update: Mon 09 Jun 2025 19:00:26 +0000
Files and hashes: 1: jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl (hash: RnK6NVZ3n0VINWoXYspuL0swDiCSZTwbHpLyK/Vwogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:5f:39:80:2e:d8:a9:1e:e3:49:97:02:34:2c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Validity
Not Before: Jun 8 19:00:26 2025 GMT
Not After : Jun 9 19:00:26 2025 GMT
Subject: CN=d5ff2387bb5372e7b6d980c2c2597982c11eeec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:53:c8:1a:f3:eb:05:72:82:54:83:d4:df:
6a:16:74:65:7e:0f:fd:f7:b0:c8:ad:6b:f0:f8:f6:
1e:d4:d3:94:e2:40:a2:39:c7:2d:28:cc:4d:b5:e5:
64:06:e3:54:23:e8:0a:02:5e:ff:8d:bf:d5:9f:f2:
6d:d9:d3:55:6c:64:d7:2c:0e:55:2b:82:95:be:62:
59:37:5e:a9:57:e2:53:e4:66:7c:f2:0c:8b:e6:5d:
ac:c2:f2:a2:68:1b:9e:b1:b5:ca:96:3b:80:2c:93:
6a:e1:54:c9:9e:7d:7a:32:3a:63:54:3b:41:57:93:
55:81:0d:61:ee:6b:d5:d7:33:da:a0:8c:0d:69:da:
5d:8b:69:c9:19:c6:94:81:70:3f:b9:d8:2a:85:b9:
9d:c9:d6:4d:e9:1b:d8:8d:c7:b4:f0:5b:4f:46:86:
cf:1e:72:f8:1e:13:ef:ec:94:40:0c:5f:3d:9d:11:
f1:b6:72:e5:23:9c:69:90:e4:6b:41:87:18:d0:83:
b9:cc:0c:0b:af:16:91:90:11:8a:3b:07:ca:58:95:
5c:14:b0:20:47:1e:00:3c:92:7d:44:a6:5b:dc:8b:
60:49:72:68:89:bc:f9:74:26:d0:3e:cc:47:a3:68:
70:28:02:dd:b2:6c:98:32:bf:2a:fd:e4:ab:35:84:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:23:87:BB:53:72:E7:B6:D9:80:C2:C2:59:79:82:C1:1E:EE:C8
X509v3 Authority Key Identifier:
keyid:8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c4:4d:b7:84:e0:8a:b8:14:7a:70:ed:7c:8b:d1:a0:08:dd:
1c:c5:c1:d8:4b:4c:c1:25:e4:cf:08:9d:a1:f9:3d:57:59:60:
ca:c0:fc:c8:29:83:d8:41:43:65:75:ef:22:af:7a:84:71:1f:
a2:a4:1b:24:cd:1b:4b:8e:88:1d:a3:fc:89:25:d7:80:60:11:
9b:96:49:59:dd:b5:71:9c:8a:37:54:ca:3b:16:d3:d1:ac:f1:
17:83:42:a2:a5:95:0b:6e:4a:15:93:db:f9:43:07:63:5c:5e:
65:87:6e:bf:94:60:10:c1:c0:48:d7:37:f4:e3:8b:69:f2:7d:
0f:85:f9:95:f5:a4:d1:08:08:d1:ab:9b:07:9e:21:a7:46:56:
2d:d6:7f:87:27:bd:9e:7a:58:2a:81:7a:76:ce:85:4f:68:ef:
86:87:e0:4e:2b:ad:bb:37:0e:e0:82:4c:96:d1:d1:af:c0:48:
a2:4b:17:75:ec:aa:c7:12:35:ca:83:2d:92:96:d7:b6:d4:1e:
e7:4b:43:c8:ec:67:e2:e2:0a:3b:7d:e3:77:2f:69:c1:e1:e4:
4a:e6:d5:60:f5:02:48:f7:d1:c0:79:e0:e8:68:04:bd:15:b3:
b2:bb:c6:43:ba:78:27:2a:69:3c:68:e4:36:bd:60:cb:cb:3d:
49:3b:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:14 2025 by rpki-client