Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
File: jDJOtM17M3hJro0yb8iZAvUDpMY.mft (raw, json)
Hash identifier: LDi44bFBawNlA1ttG6iVyszP3WDuznHTC7C+drzDsB8=
Subject key identifier: 50:59:84:97:A3:86:90:1B:9F:0E:CB:A4:45:1F:1A:C3:2E:C4:CF:62
Authority key identifier: 8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
Certificate issuer: /CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Certificate serial: 01974BFB633C748FA9D5E78DC6BBFE4E17DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
Manifest number: 34
Signing time: Sat 07 Jun 2025 20:00:55 +0000
Manifest this update: Sat 07 Jun 2025 20:00:55 +0000
Manifest next update: Sun 08 Jun 2025 20:00:55 +0000
Files and hashes: 1: jDJOtM17M3hJro0yb8iZAvUDpMY.crl (hash: mmtCDT8KTajrbP8wUh3Th4apcK8pbuYWkAypewtbGeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:63:3c:74:8f:a9:d5:e7:8d:c6:bb:fe:4e:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Validity
Not Before: Jun 7 20:00:55 2025 GMT
Not After : Jun 8 20:00:55 2025 GMT
Subject: CN=50598497a386901b9f0ecba4451f1ac32ec4cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:cc:18:e4:14:8b:a3:02:af:c6:77:6e:30:
e1:8a:c7:8c:91:57:58:da:a7:bd:07:d4:07:91:2c:
70:52:c4:0d:45:56:76:4b:65:42:c0:85:df:c8:d2:
a6:0f:91:26:e3:cb:ac:10:20:de:50:78:05:90:8a:
ff:07:c6:2f:71:3b:d2:36:fd:b0:67:26:21:84:4c:
f2:a3:99:b9:ed:27:2c:d6:d1:1d:31:37:8d:6e:da:
5b:fd:9c:27:76:2a:9a:13:13:5f:ba:fa:7c:5b:4c:
c4:97:f0:e9:48:e1:89:8e:9f:52:12:29:d5:3e:20:
4b:a3:b1:cc:4a:57:7f:1e:1e:d3:b1:a1:f7:29:ae:
93:a9:ca:b9:13:c8:e3:ae:46:3b:a1:95:c5:07:ae:
08:c9:88:5a:d3:80:de:3b:65:ad:55:54:da:d2:2c:
d8:bb:b8:44:ce:ee:0a:72:b4:2f:4d:04:9e:14:c0:
1e:95:ef:5e:05:c6:ed:83:00:8f:27:fd:03:3c:25:
06:ae:8f:53:ff:98:f8:e8:b3:79:19:94:b2:fd:e4:
e6:e1:6f:d1:bb:10:74:65:98:78:93:c5:68:a6:56:
47:45:47:c9:bf:72:e7:8d:6d:78:65:96:3e:70:2e:
7a:f5:c0:ba:27:4c:c6:96:19:34:5d:43:c4:3a:01:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:84:97:A3:86:90:1B:9F:0E:CB:A4:45:1F:1A:C3:2E:C4:CF:62
X509v3 Authority Key Identifier:
keyid:8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:3b:e1:bb:3f:47:d4:80:84:22:5f:1e:bc:cb:5c:21:78:
e8:2b:29:fd:00:69:bf:ed:b0:3b:51:8a:74:14:39:a4:8f:d4:
f3:98:c1:a2:55:49:57:28:2f:84:43:3f:a3:ee:fc:59:5a:c1:
a9:54:38:12:96:08:d0:59:e6:e9:1b:fb:33:6f:5c:1d:e5:29:
d3:51:9e:7c:8e:c0:d6:84:5c:17:e3:0a:01:3d:1c:78:e2:f3:
2b:7a:9a:7f:b3:22:2b:ae:1d:ca:d8:46:c7:0a:a6:bc:cc:72:
8f:56:2d:b3:62:a0:e7:51:fa:1a:db:05:c9:da:2e:a7:f5:eb:
f6:3a:94:da:34:4b:73:b4:32:dc:e9:57:82:d8:c8:03:e5:5c:
4b:9a:fb:96:d8:d2:c4:1c:39:30:81:3e:d7:9c:bc:07:b1:25:
b0:33:ec:40:e9:f1:15:3b:40:67:2e:19:60:a1:4e:f4:49:68:
8d:ba:3f:c8:71:7c:48:a9:a8:b7:56:cd:b2:a6:c9:22:17:67:
f5:27:24:33:95:e7:ef:7d:5e:38:b8:42:8d:e4:91:da:aa:87:
56:b7:fb:f8:d6:d3:e6:22:b1:7f:cb:0e:d7:0a:8d:6e:79:d0:
17:d9:39:0c:f8:6e:ba:69:82:ff:30:d5:bc:97:f0:a1:f4:73:
2b:d6:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:27:22 2025 by rpki-client