Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: Fvcq28A3xumeYx5n5oF7As9RVUXgcjaV/swS8N4dN+g=
Subject key identifier: D3:C3:80:12:EA:FB:57:0A:3A:D2:07:C3:9E:BB:AB:89:1A:20:BE:CA
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 019754235F49CD9D25B8B42D035ED4586DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 06A1
Signing time: Mon 09 Jun 2025 10:01:33 +0000
Manifest this update: Mon 09 Jun 2025 10:01:33 +0000
Manifest next update: Tue 10 Jun 2025 10:01:33 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: 6mDGb7ZU4zQKyoVDWTTXlrMmwE027hGrQ85lZlAduBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:5f:49:cd:9d:25:b8:b4:2d:03:5e:d4:58:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Jun 9 10:01:33 2025 GMT
Not After : Jun 10 10:01:33 2025 GMT
Subject: CN=d3c38012eafb570a3ad207c39ebbab891a20beca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:72:89:27:30:f1:80:07:54:21:8a:a1:c1:
e4:53:80:fd:9c:26:8e:30:a9:ad:6e:7a:b4:61:6e:
d7:4d:39:bc:96:06:eb:d9:fa:5a:f0:e0:93:7b:3e:
c3:bd:d8:4e:89:8c:8f:5e:0b:7a:15:64:e3:55:cb:
e7:ab:a3:8f:c7:56:41:d6:eb:d4:e6:a3:a5:e9:8d:
f5:da:43:5a:90:ad:dc:10:09:20:22:cb:f8:46:7f:
ad:12:a3:9f:be:70:b2:fd:6d:bd:24:63:03:ca:db:
72:d3:90:3a:a5:d3:d6:f0:2b:10:51:09:36:8a:6f:
a2:75:ec:43:4c:d5:d2:6d:e2:47:14:80:51:a6:41:
5d:a6:e7:29:ce:12:a7:eb:a9:d2:c9:f1:82:c4:e1:
e0:31:a5:d1:4b:fa:31:7d:a3:78:86:fb:df:c4:17:
c0:fc:9f:6a:b1:61:36:50:7b:47:ef:1a:09:27:16:
a9:f0:6c:b5:c1:bd:37:e5:dc:ff:37:64:48:c7:8d:
a3:b5:84:04:db:77:3c:51:20:84:67:4f:8f:d6:f8:
76:a2:b6:ff:c0:a5:8d:fd:01:8c:73:ad:ed:19:15:
b7:02:1e:1f:b7:8f:31:86:c5:1f:74:a5:1d:58:32:
f5:2c:02:ab:0f:33:7d:83:45:8a:12:e1:00:ae:14:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C3:80:12:EA:FB:57:0A:3A:D2:07:C3:9E:BB:AB:89:1A:20:BE:CA
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:e0:ce:83:95:7d:ab:7a:49:d5:9b:42:f8:c5:7a:17:2f:
3a:3b:5c:45:4b:9e:8e:68:f9:a7:bb:5b:7a:8c:1f:fa:5b:00:
6e:95:c7:63:88:79:7d:24:8f:68:f6:1a:cd:23:1d:47:15:fd:
c3:65:8f:2c:87:ab:7f:61:a0:16:18:09:72:b0:0b:a4:30:c6:
3a:6b:81:f3:db:5a:28:04:0d:20:f0:23:92:55:b1:b2:c0:03:
73:e2:a6:37:7b:76:ba:bf:c4:d6:fe:ae:db:7e:7b:38:78:a5:
4f:29:75:f3:73:ab:55:56:a4:d0:45:cd:41:1a:0d:67:cd:9d:
03:23:d3:e6:de:4f:b6:ae:b5:3d:cc:0e:18:0c:5f:38:56:7e:
39:ae:6d:ce:9c:61:03:03:f1:90:3b:43:44:eb:3f:ef:c7:c0:
7f:1a:64:12:e1:96:ea:55:7d:d1:29:29:8d:45:59:5e:36:b0:
2a:47:4d:f0:72:da:d0:c0:3c:b6:4d:23:44:a8:42:39:91:c1:
5a:2d:c3:c8:19:4f:e9:1a:bf:0a:df:ca:06:21:c6:d1:f3:96:
75:80:b9:d6:74:ea:ec:5a:cf:ce:8c:c7:eb:03:15:d6:fd:84:
11:eb:32:0d:03:1b:ca:ba:30:93:de:96:07:aa:29:bc:d1:f5:
46:66:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:25:17 2025 by rpki-client