Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: U2ijvW6++4oDMucPQ/NvoNUjWTp7WgGrKMT3HO6Hk4o=
Subject key identifier: E4:7C:BA:56:9A:B4:22:54:29:16:A6:58:7C:E3:31:45:E8:9B:6E:F5
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 01974BC4228E69C617F758A93A15C16C542A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: CF
Signing time: Sat 07 Jun 2025 19:00:34 +0000
Manifest this update: Sat 07 Jun 2025 19:00:34 +0000
Manifest next update: Sun 08 Jun 2025 19:00:34 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: FDhXzITrw/6Kqih/IhWtt/jJ9FXIYhNYT6SgboznB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:22:8e:69:c6:17:f7:58:a9:3a:15:c1:6c:54:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Jun 7 19:00:34 2025 GMT
Not After : Jun 8 19:00:34 2025 GMT
Subject: CN=e47cba569ab422542916a6587ce33145e89b6ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:3f:b7:85:d7:37:f2:0d:45:fa:bb:0d:39:
47:06:bb:a8:90:ae:91:05:52:e9:8d:c1:0a:a2:73:
88:7f:d4:90:dd:de:48:9d:58:38:00:af:e4:d1:5c:
2a:40:36:1b:9c:59:fc:6d:53:45:d7:f5:2b:1f:b5:
77:39:73:96:6d:54:d2:64:b3:89:46:57:76:b4:ea:
57:7d:05:43:c0:08:e2:cd:0e:b4:1b:e8:5c:7c:1f:
09:d1:04:91:35:3a:a2:f0:de:9f:29:61:04:2a:f2:
c4:d9:3d:e6:fc:34:c8:de:8b:b9:37:e7:0a:22:c5:
62:b2:ef:5e:5d:60:6a:39:d4:d1:7d:4d:b0:ac:64:
37:19:b5:0f:29:66:b9:d2:a5:91:d9:c9:60:7b:59:
64:19:c0:e0:f7:93:cb:93:5c:7a:b0:c8:28:1a:48:
0f:13:76:79:00:02:7e:3b:b2:b8:5c:c2:5b:ae:19:
4a:17:b9:0d:9f:d7:d2:50:06:1e:6a:4f:8f:7e:1e:
49:88:4f:9f:16:c8:43:8d:03:e9:4b:5a:9e:86:5a:
14:3f:a6:b7:36:61:4b:99:d7:c1:55:c6:9d:86:9c:
7e:49:27:50:22:ff:74:5b:8a:17:74:bc:3e:9a:34:
43:60:bb:82:67:fb:53:f7:68:4a:7a:10:1d:84:34:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:BA:56:9A:B4:22:54:29:16:A6:58:7C:E3:31:45:E8:9B:6E:F5
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:96:f2:60:9b:20:de:59:21:d9:7c:11:d7:12:e0:5b:c9:
01:6b:e1:a2:c1:81:0f:ae:5a:f5:0d:6d:e4:cc:84:40:ed:df:
ec:c3:b1:d2:cd:8a:1e:58:c5:4c:41:89:fb:6b:57:54:cf:a6:
77:d0:6c:20:2a:0b:4a:9e:ed:31:2f:d9:8a:21:98:46:47:b3:
ab:94:d1:99:ea:16:59:94:02:31:23:30:c4:f0:28:4f:00:79:
33:80:eb:af:48:33:0e:fa:a6:bc:9e:45:04:3e:d6:13:8e:40:
a5:87:11:38:61:1e:29:22:a1:de:af:65:ef:df:d5:55:37:0d:
86:02:2d:9f:f8:30:3e:0d:d5:3d:18:1e:71:8b:7d:13:d7:9e:
4b:9f:ed:bf:ac:59:70:2a:8e:20:49:d8:1c:79:04:a0:91:cc:
be:80:a3:6e:b7:86:0d:88:88:44:c5:13:47:4e:7c:47:14:a5:
e0:6b:36:18:d9:93:eb:13:7e:f2:a5:52:9f:ef:42:59:61:7e:
80:a0:7b:2e:47:cd:8b:08:99:ee:70:2c:5f:f2:98:dc:45:b0:
42:37:23:7f:72:4d:65:bd:f6:90:52:e9:e6:40:a0:a1:a6:c0:
94:cb:8e:07:ff:50:d4:ce:35:56:64:c7:c6:b1:a3:3b:a1:be:
93:9c:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:24 2025 by rpki-client