Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: gtKiBM0A6TVIZwO3Ea+bJneMfXT5TPVZAd61+Lw6m2c=
Subject key identifier: 35:51:CB:B5:10:22:CB:F4:50:BB:E6:69:A8:54:BF:A6:E3:5B:F7:37
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 01976F2BF55A95FBFE98A64BCA16C70D364B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 06AF
Signing time: Sat 14 Jun 2025 16:00:41 +0000
Manifest this update: Sat 14 Jun 2025 16:00:41 +0000
Manifest next update: Sun 15 Jun 2025 16:00:41 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: DQhpGP2LFp/EZtM6pz5iU0PgGds4VX9yrhybdg0OpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f5:5a:95:fb:fe:98:a6:4b:ca:16:c7:0d:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Jun 14 16:00:41 2025 GMT
Not After : Jun 15 16:00:41 2025 GMT
Subject: CN=3551cbb51022cbf450bbe669a854bfa6e35bf737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:ad:29:f4:33:fe:23:1d:b7:db:e2:2b:78:
cb:c5:eb:e6:71:40:38:ef:3f:df:03:a2:78:75:96:
53:e1:d6:68:d2:de:20:07:46:da:09:5b:9a:b7:03:
3f:fa:b9:00:cb:b7:f7:8d:f0:4a:97:da:cf:08:a0:
ed:c9:db:d6:54:7e:d4:31:7f:3c:f9:a3:31:3b:92:
34:f6:e2:cd:2c:56:81:e7:09:35:75:b6:34:25:05:
c6:0c:93:9c:da:a7:4d:ca:49:2d:73:74:dd:9f:b7:
30:02:e7:04:83:cf:65:03:f2:8b:bf:de:8e:14:2a:
cd:26:37:22:50:17:0e:2e:ba:25:89:53:bf:e4:6e:
ed:2b:79:45:47:1e:20:d5:5a:32:3a:18:da:88:25:
6f:d3:2f:78:1a:91:2b:7d:02:29:36:d1:65:e9:56:
7f:1f:1f:ec:6f:d5:53:dc:e6:23:d9:da:4e:0c:6b:
08:96:de:b9:67:31:16:c6:02:b9:00:94:32:c7:bd:
e6:40:20:f5:cd:07:e9:c4:9f:23:28:73:c3:e9:30:
49:1f:d3:4b:f1:cd:26:a6:c8:d2:7e:20:27:fe:4f:
ed:02:b6:36:f5:8a:3a:1f:b1:a5:71:49:a2:b6:9a:
54:f1:d2:63:87:39:a5:dc:b4:5c:61:04:66:59:cc:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:CB:B5:10:22:CB:F4:50:BB:E6:69:A8:54:BF:A6:E3:5B:F7:37
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:91:6e:2d:1f:44:ba:a5:4e:7d:80:ad:e3:e7:72:ac:bb:a0:
f2:fe:48:04:ff:db:ec:cd:23:0d:dd:20:27:89:21:6c:de:df:
a3:82:69:b6:d5:44:76:91:8f:0f:4a:bf:d3:db:8a:33:83:b8:
4a:c9:ad:d9:3a:e8:0f:01:00:9d:c9:30:30:b2:87:4f:71:d1:
60:8d:90:7c:fb:0b:31:0f:18:20:5f:e1:7b:e5:1e:0d:a5:ff:
50:b2:8d:60:b1:1a:27:8e:e6:74:8a:8f:41:30:e3:56:d1:ba:
32:92:b2:bb:0b:ea:92:2a:08:15:12:ca:98:1b:c0:ad:b8:3f:
e3:cd:f7:0a:aa:82:fe:1e:e6:41:72:9c:1a:c7:32:5f:18:9e:
e0:16:05:4b:fc:31:b4:9b:4d:50:57:78:db:d3:51:8d:ae:85:
31:9b:77:af:3a:32:a6:3c:6f:2c:6e:3d:2e:23:a8:62:73:a9:
34:ce:23:1b:a9:d0:31:fa:c3:04:86:75:94:33:b6:d5:10:0b:
95:58:75:9b:ce:a1:e8:b9:19:19:74:84:c3:4a:95:28:ed:c6:
2f:1e:16:1d:55:eb:80:ab:db:d4:6f:48:ec:32:dd:a9:df:c4:
02:39:61:2f:92:fb:aa:75:18:c0:48:1b:c6:72:c6:be:ba:e7:
44:b8:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:07:58 2025 by rpki-client