Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: rIUTx5M6hkHf2GkieTD+V7UOPhOBkAUdfDd1EkYzj/c=
Subject key identifier: 30:49:B1:B8:99:F9:37:F2:A9:E1:3F:13:DC:04:F6:AA:79:6D:30:E3
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 0197CBE019D0807C46C02994471A88F3F895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0EB9
Signing time: Wed 02 Jul 2025 16:02:30 +0000
Manifest this update: Wed 02 Jul 2025 16:02:30 +0000
Manifest next update: Thu 03 Jul 2025 16:02:30 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: vz5PtoH0DYGzjoVT4kCwf4POdPeyXI6AMO9EUd71oRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:19:d0:80:7c:46:c0:29:94:47:1a:88:f3:f8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Jul 2 16:02:30 2025 GMT
Not After : Jul 3 16:02:30 2025 GMT
Subject: CN=3049b1b899f937f2a9e13f13dc04f6aa796d30e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:d5:87:71:0c:34:a6:e6:87:0e:02:a4:a5:
a7:ab:43:0d:2e:d3:92:49:a8:fe:2f:1d:9a:2d:ba:
8c:a3:03:0d:70:f8:17:b8:6d:b7:94:9e:af:a7:43:
50:f2:7d:72:4d:60:1b:ad:d2:b9:b5:57:91:43:08:
ff:13:ab:10:fa:37:95:8a:e4:e7:a4:85:3e:e7:46:
ca:2d:93:b9:60:97:c6:a2:97:bb:27:a0:e6:3c:96:
82:fb:2a:d0:6d:6d:0a:ce:f3:9a:5c:cb:6d:b4:03:
60:20:4c:d2:92:7f:7d:d1:55:e5:59:dd:46:25:d8:
78:fd:75:17:a7:25:22:f4:a3:ce:c8:4e:d6:bc:e8:
69:17:96:63:43:3c:b4:71:57:ff:c2:b0:5d:43:2b:
61:67:c7:4f:a1:d3:ce:fb:e3:ea:ee:4d:5d:69:ec:
ee:83:c6:85:17:ff:8c:dc:cd:04:6b:88:0f:e0:bc:
bb:9a:31:7a:ef:c0:7e:1d:90:f4:d4:d4:71:09:27:
fc:8b:07:53:67:aa:4e:e2:41:23:dc:93:54:b8:d3:
06:20:07:61:64:b5:8e:bc:e1:0c:9a:bb:31:74:f7:
0e:e5:25:ed:85:08:58:03:58:5a:3c:03:95:6d:4d:
04:5c:7d:bc:1b:46:1f:54:d6:f2:9a:4f:06:03:52:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:B1:B8:99:F9:37:F2:A9:E1:3F:13:DC:04:F6:AA:79:6D:30:E3
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:89:f0:b5:89:3b:21:82:cf:7a:b4:e5:cf:40:e8:c6:03:8c:
6a:be:20:5d:3c:b6:5b:d1:bb:29:75:3c:f4:96:51:b6:15:b1:
f6:4d:07:cf:a4:12:6b:9a:5d:0a:6b:7a:4d:fc:d5:07:a6:28:
24:93:71:4c:aa:2c:0b:ed:d9:ef:79:1d:37:9c:70:15:73:89:
aa:ca:a2:a5:3c:76:fd:c6:89:82:cf:2c:2b:20:a0:e2:04:fb:
9d:eb:94:f8:71:af:f0:c2:5f:0a:80:99:9e:73:08:ef:53:fd:
e2:25:cf:15:01:2f:5f:c5:59:3b:37:1f:59:09:d4:6c:5e:0a:
2d:8b:4b:0f:11:e6:18:b9:20:6b:60:44:f3:86:7e:5e:44:88:
8e:dc:d5:1b:dd:6c:b2:c8:a5:a2:51:ff:35:c5:a2:fb:0b:ed:
f9:dc:0e:40:42:27:bb:03:3e:1c:d8:c5:ad:b7:be:c1:b1:15:
70:a7:99:ec:a6:e5:40:db:c4:fc:0a:05:50:0c:db:bd:1b:59:
c7:db:03:f4:08:2b:4a:70:10:6a:c0:c7:17:dd:ed:c8:3b:47:
b6:07:e5:90:ee:10:fd:e8:89:00:32:e4:38:94:4c:80:36:8a:
bc:6e:7c:83:98:7c:86:4a:a4:08:9a:3c:b3:0b:e0:ac:e9:ba:
bf:e6:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:48:38 2025 by rpki-client