Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: sALRjS555FeZ9AThVPXHOlu2Lb/ugnlqbjDvyJNe+IM=
Subject key identifier: 2C:B1:9B:E6:DD:07:91:EC:55:CE:A1:15:51:94:19:F2:09:CB:30:AC
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 01974A7B4883CD88EBAA8189C83FA53318D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:22 +0000
Manifest this update: Sat 07 Jun 2025 13:01:22 +0000
Manifest next update: Sun 08 Jun 2025 13:01:22 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: 6Q6gJd6/bhIsa/O9wXamjaNsLgUODAkLN5O2piBl7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:48:83:cd:88:eb:aa:81:89:c8:3f:a5:33:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Jun 7 13:01:22 2025 GMT
Not After : Jun 8 13:01:22 2025 GMT
Subject: CN=2cb19be6dd0791ec55cea115519419f209cb30ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a4:40:9d:c3:d8:be:52:59:b5:c6:f9:32:29:
63:9d:02:6e:ea:b6:a9:a8:cf:5e:eb:ab:5d:d7:2d:
78:c5:5b:89:9e:28:ca:f0:01:18:c2:f4:b5:29:ca:
1a:a4:91:a9:61:b4:ee:17:70:f1:12:94:ba:2f:ab:
2d:47:3c:ef:cc:f3:52:0d:56:f2:1a:72:66:33:65:
99:cc:c3:0a:30:43:9b:78:6d:b4:b1:86:9d:7c:8f:
c9:31:ea:79:8b:16:09:56:86:b2:0c:c5:77:2e:d9:
9e:67:80:9a:25:4d:a5:9b:8d:78:90:70:32:34:df:
b5:51:19:51:f0:a3:91:6c:66:64:b8:9f:6b:bc:f3:
df:0c:13:29:ef:7e:e7:4e:2d:6c:5a:08:02:f9:fb:
00:1c:d3:0c:3e:36:63:1e:57:7d:d1:6a:34:e9:c2:
b9:c0:a8:a0:62:25:b1:01:3b:7c:1f:68:33:8a:e4:
8c:a0:a5:00:e3:55:72:2d:bc:05:60:76:3f:c9:af:
e0:b9:51:b6:63:df:a6:9f:f2:04:3d:17:33:d6:d5:
2d:24:84:cc:5f:df:45:cb:df:25:7e:65:55:5a:e6:
4e:76:50:14:07:b2:a5:e7:e6:fd:22:22:cf:02:70:
db:a3:ca:4f:44:c9:f6:3b:47:f0:b3:64:28:fc:73:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:9B:E6:DD:07:91:EC:55:CE:A1:15:51:94:19:F2:09:CB:30:AC
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:61:eb:f2:c7:ca:67:d6:ec:c3:46:45:fe:f5:92:1c:50:b9:
a4:ff:6b:53:8b:d7:7b:c9:3e:51:59:b7:1b:2a:df:71:b0:11:
cf:91:5d:cb:41:d5:bf:31:38:29:b9:02:e8:7d:ce:7f:81:85:
2a:e6:a2:6f:52:61:9f:45:8c:16:44:6f:01:a5:0a:eb:b1:8d:
94:80:f6:bf:ee:4e:3a:21:6a:3e:04:5d:fc:9a:92:05:8e:2c:
3e:45:cc:99:d4:38:c5:f9:c4:31:0b:56:2f:f8:e6:45:4c:be:
c1:c1:a2:32:8b:25:84:0e:f7:d6:41:36:37:22:e7:c4:80:85:
12:bc:7a:2a:c2:70:7c:6a:7b:fb:ac:5f:8f:ac:de:4f:44:69:
cf:64:55:14:e0:9f:3a:89:fa:ae:c6:1f:b2:fb:15:20:fc:e7:
3c:82:de:a1:4c:be:62:62:1f:c2:c3:07:2f:3f:c4:45:6c:ff:
2d:d8:43:18:80:d8:31:4e:c2:0d:34:05:22:76:4c:2f:4e:dd:
d1:91:49:cc:aa:62:9f:52:f3:70:29:cd:67:ec:04:36:bb:49:
aa:58:20:9b:de:90:42:b8:17:35:94:e5:65:97:fd:b5:3a:02:
5e:99:4b:ef:6b:e8:24:bd:39:fa:a4:e3:df:be:c3:15:ce:79:
b3:24:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:46 2025 by rpki-client