Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: 838cKO0iy+uMTs+UdNUjrCrH8a2BFsECYQ5JEQMNkQM=
Subject key identifier: 20:17:04:72:1F:C8:FF:08:24:FE:77:06:E8:C5:F0:11:49:C7:35:74
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019748FA952C1516BB464DBDDE264E839D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 06:01:10 +0000
Manifest this update: Sat 07 Jun 2025 06:01:10 +0000
Manifest next update: Sun 08 Jun 2025 06:01:10 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: 0XfEMssn3u/gWVIdHNv0D47HAo8web8xNb05L+Pkmck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:95:2c:15:16:bb:46:4d:bd:de:26:4e:83:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Jun 7 06:01:10 2025 GMT
Not After : Jun 8 06:01:10 2025 GMT
Subject: CN=201704721fc8ff0824fe7706e8c5f01149c73574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:a9:28:49:34:94:0d:f5:ce:29:c0:d4:d5:
bb:cc:e6:fd:05:12:d2:a1:29:b8:a8:0c:47:d4:75:
27:55:91:89:95:3d:e3:93:9c:91:34:b0:92:a6:f8:
bc:a5:0f:a3:14:e8:bf:fc:24:f2:5b:30:62:cf:96:
14:d0:0a:a2:81:13:a4:e5:a6:0d:84:00:09:47:79:
5a:6b:28:fc:30:15:4f:de:a8:a9:8b:c1:1e:98:04:
37:c1:12:25:2c:39:1d:a5:7e:24:fc:72:e6:7b:c7:
48:a3:dd:50:06:55:42:98:28:17:b5:64:cd:48:bd:
e8:fc:10:98:0a:b7:fd:36:8d:d6:31:eb:be:bb:5f:
7b:66:c8:b1:6c:87:36:3d:d9:7d:d9:9f:2a:0d:24:
d9:1c:48:8c:22:a2:14:b4:c8:5c:58:53:71:4f:d4:
a4:fc:76:3b:ad:03:c0:fb:71:a2:ce:b1:41:42:f4:
5c:ea:c7:f2:eb:f2:e8:d6:22:23:42:e3:56:e7:5a:
2f:69:20:12:21:74:54:39:c0:cf:78:f2:7d:56:86:
8d:44:fb:83:ee:dc:b0:86:1a:09:30:8b:da:70:86:
a9:8c:c0:bf:47:e9:3b:a5:ab:6d:f7:81:b3:7b:27:
aa:bf:d4:bb:4a:81:71:8f:37:d0:a9:9c:7e:45:2f:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:04:72:1F:C8:FF:08:24:FE:77:06:E8:C5:F0:11:49:C7:35:74
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e5:8c:19:a9:de:c6:94:7e:79:6b:1e:f2:c3:f7:5d:4f:e7:
a5:dd:6e:6b:db:94:d6:5e:38:1d:5b:d1:67:32:e5:5e:93:83:
83:45:9b:ad:2d:c9:0b:df:62:3f:53:c1:b8:b3:63:be:d4:30:
70:d1:fa:92:09:7e:bd:a5:8f:b2:3f:02:75:34:cf:a7:76:d6:
1c:4e:5b:25:d2:15:b9:24:6f:68:1a:77:cd:1d:1e:28:fc:17:
0e:ab:b5:33:7b:ea:af:bd:01:28:f4:2a:34:b2:19:2a:cc:4f:
5e:82:f8:a2:96:d9:cc:2d:1f:ef:52:d2:c1:e5:da:43:47:b9:
b9:d6:f7:2c:f0:45:c9:57:a7:a2:6e:7b:13:b5:2c:f3:37:cf:
57:4f:f3:07:0a:d2:16:af:85:6b:57:33:22:6c:dc:6d:77:af:
e9:37:d8:3e:9c:47:31:d4:92:a2:f7:a4:6c:5b:f1:ec:16:90:
29:25:09:6a:94:75:8d:5e:c5:09:39:a1:e0:62:d0:3c:a1:dc:
fa:31:fe:fd:c6:1b:55:45:75:8f:c1:90:cf:49:17:1f:a5:27:
d8:41:a4:a3:b7:fb:6e:38:59:c8:ff:59:da:c2:a7:a7:d7:83:
86:77:fa:8b:aa:08:66:4e:28:77:11:6b:03:b6:af:c9:cc:0f:
74:29:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:40 2025 by rpki-client