Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: yGvTZNMIcH9HWiOHMWOhFhp2XJ+dt/yzt2XxTefNkFI=
Subject key identifier: 03:48:41:FA:BB:39:21:13:7E:AB:CF:35:65:B6:78:26:14:FE:95:2F
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 019759EDF2DED2145D53259A76F805DF1A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 06A4
Signing time: Tue 10 Jun 2025 13:00:55 +0000
Manifest this update: Tue 10 Jun 2025 13:00:55 +0000
Manifest next update: Wed 11 Jun 2025 13:00:55 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: i7wFD2s3jR+Y4FD6FRvvVJ/ljwjqbb4/fBvVbgISPKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:f2:de:d2:14:5d:53:25:9a:76:f8:05:df:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Jun 10 13:00:55 2025 GMT
Not After : Jun 11 13:00:55 2025 GMT
Subject: CN=034841fabb3921137eabcf3565b6782614fe952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:e8:b3:20:7a:00:03:78:8c:ea:68:29:fe:
e5:d3:b0:75:1b:31:80:de:b5:e7:42:aa:9c:e3:2f:
98:2f:c9:51:80:cd:09:51:92:07:50:c7:93:7f:ca:
00:21:ac:27:c7:ca:ad:48:2d:1f:fd:ec:ee:bb:4f:
55:41:f8:74:a3:9a:2e:ae:58:29:ea:67:9e:15:f1:
09:8a:d0:c0:92:13:a9:60:0e:33:e8:8d:64:35:f7:
70:8f:34:ed:75:13:84:a3:3a:5b:c7:ab:02:26:62:
4e:96:e9:78:76:61:11:d1:e7:4e:76:c3:c1:e9:bc:
4a:b9:94:a2:0e:7a:e1:00:65:fc:26:45:ac:8f:c2:
ed:ae:41:d4:c4:ed:5e:de:f6:58:ae:ef:74:17:14:
c9:68:b7:81:fd:0a:0b:4f:49:30:75:a3:36:40:07:
e9:fd:4f:0c:a0:c6:dc:18:8e:0e:a2:44:f5:d3:89:
f4:27:06:59:0d:ce:00:6b:7f:84:63:58:73:3c:08:
51:98:57:cd:09:a4:71:b1:e8:39:54:b4:14:90:bc:
c8:75:6f:4e:d0:8c:72:0e:24:31:06:41:5a:73:86:
a8:05:a3:a9:8f:ed:21:f6:56:78:8d:71:b0:5d:3d:
ee:83:cc:88:24:3a:f9:40:75:a3:38:61:96:8b:4f:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:41:FA:BB:39:21:13:7E:AB:CF:35:65:B6:78:26:14:FE:95:2F
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:4a:6f:89:c0:f1:2a:1b:d3:19:3a:f4:13:31:2c:0e:ce:
f7:0b:25:bf:91:0e:76:00:8b:4e:85:af:af:2b:a6:81:33:09:
4c:43:ee:b3:bf:97:b1:62:4d:be:a4:45:9e:3f:e1:5c:06:21:
8b:73:f3:f2:14:c9:83:58:26:e2:ff:fe:84:80:b0:89:44:f3:
ef:bb:c6:08:61:75:32:5a:49:77:32:4f:f8:89:bc:8b:4c:24:
17:22:4d:d5:bc:ae:5b:6b:6d:b8:7c:2d:60:91:74:b8:88:12:
a7:e5:f7:09:8c:70:87:78:1d:fd:7d:c2:5d:0d:be:58:dc:7b:
f7:35:47:a7:42:bd:4c:95:40:5a:a8:b6:23:63:75:4b:87:29:
1e:ec:0e:2c:21:8f:80:72:a8:73:28:94:f0:7f:72:b8:41:43:
4f:26:ac:bc:7f:44:a0:38:36:82:b2:4e:33:55:29:7c:48:23:
91:77:06:ee:ac:92:51:b7:1a:38:4d:24:e6:24:7f:0a:89:59:
25:0a:9b:35:7c:7a:e3:1d:87:ff:8c:39:42:70:02:e6:6e:92:
b4:91:d7:49:2f:56:d6:61:2f:85:04:a1:8c:0e:8f:7a:a8:7e:
09:08:f6:46:6d:85:b1:0d:b6:82:83:8b:c5:66:ab:1c:96:67:
04:10:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:37:20 2025 by rpki-client