Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: PvLbD3dAJBvRhNVBC6WmziOMFGi7d3g7fzfQ3PNcDTk=
Subject key identifier: A0:43:A4:DB:B4:F9:8E:89:9C:36:F1:C6:72:83:C1:9C:71:04:37:89
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 01974A7B4AE4BDC61D780EAA27D87AF50092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:23 +0000
Manifest this update: Sat 07 Jun 2025 13:01:23 +0000
Manifest next update: Sun 08 Jun 2025 13:01:23 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: 8JLGYHjoQ43LWR0LFpAdilawNdudJD1vKIp4pAXfsyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:4a:e4:bd:c6:1d:78:0e:aa:27:d8:7a:f5:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Jun 7 13:01:23 2025 GMT
Not After : Jun 8 13:01:23 2025 GMT
Subject: CN=a043a4dbb4f98e899c36f1c67283c19c71043789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:dd:5a:b1:af:73:c8:d7:35:65:ee:f8:19:
35:be:4a:1d:57:fd:3e:64:f9:b3:05:f7:64:5a:c8:
6c:01:4d:29:1a:fe:e6:c1:93:61:58:41:d0:7c:e1:
08:95:f2:8e:98:2c:d4:1f:f9:19:41:dd:83:2c:c5:
3a:26:6c:53:fa:ad:8f:44:2f:7b:61:b1:c5:a5:f2:
25:92:5d:d1:cd:06:f9:df:5b:61:65:04:3d:a5:b7:
7d:dd:f5:ed:11:f1:f0:4a:8b:60:3b:bd:a9:89:97:
13:3f:8d:f6:f9:f7:e2:f3:2e:7b:04:9c:4d:3d:86:
c3:af:e9:d8:23:6d:9a:2f:2b:0f:0d:53:fd:61:05:
8e:6a:b8:27:42:7c:dd:b8:9c:63:60:f8:b0:04:d4:
f3:7a:d7:42:c0:07:87:52:59:c8:2a:a5:fa:e5:38:
21:79:26:80:d5:af:1b:5a:3e:c0:a1:be:7b:ba:71:
dd:6e:70:f6:4e:a2:26:82:a5:72:43:06:b6:ed:47:
cf:ec:f7:e5:cf:aa:48:8b:15:0c:d2:26:7a:fb:9b:
43:64:0f:a1:10:99:e8:b5:90:31:df:72:2d:fe:dd:
de:76:02:70:1f:43:0b:d0:20:b7:69:09:51:ea:b9:
5e:56:d8:5c:a0:db:1e:7c:4b:27:51:1f:5c:4d:5d:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:A4:DB:B4:F9:8E:89:9C:36:F1:C6:72:83:C1:9C:71:04:37:89
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:2b:47:55:ea:81:75:d1:d5:66:d1:1f:2d:6a:f5:b3:25:
5c:f1:45:91:8b:4d:77:52:b4:4a:16:f6:f4:6f:54:5e:d0:9a:
9b:ab:4a:ab:5c:54:d1:cf:d9:10:f3:5b:eb:86:76:05:22:56:
f9:3d:ad:b9:9e:64:9e:95:64:fd:0d:0f:01:8b:32:85:87:fb:
b4:e4:49:98:32:dc:98:e1:0f:28:af:47:98:f6:12:0a:a2:26:
0d:54:cf:2b:8f:4b:fd:be:cd:3a:be:cf:d5:7d:0e:30:49:aa:
46:f6:4f:ae:fb:aa:db:34:ef:69:01:13:b1:0b:6a:e5:75:6f:
ae:eb:37:26:5b:82:73:57:20:4b:55:a9:e9:57:40:4e:f0:28:
5e:bb:3f:b5:f2:ce:46:a8:87:b5:c3:7e:3f:6c:33:79:cb:45:
a1:ce:19:00:4e:f8:46:45:2f:a0:73:22:95:39:ac:bb:44:3b:
de:25:30:1e:f8:fd:7a:aa:3d:4b:e4:8a:cb:ea:65:bd:e7:5b:
14:c7:e0:47:09:8e:28:45:ce:d5:b8:7d:b9:6b:31:c2:76:12:
e5:37:d8:a4:f7:60:2a:0f:99:32:26:10:e9:c7:f8:77:08:df:
88:87:55:94:c4:c9:04:98:f2:ce:d3:3b:51:13:bc:0f:c9:45:
e0:2e:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:00 2025 by rpki-client