Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: 8BHV0tZojod3UjQkV5uGziD1TE1MAz0kfJuVINp4aCc=
Subject key identifier: 84:1B:74:B6:0C:C2:0F:80:FA:16:F3:97:7B:97:DE:9D:7F:44:CD:12
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 01974968722DB848616502276E4A002E9A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 08:01:11 +0000
Manifest this update: Sat 07 Jun 2025 08:01:11 +0000
Manifest next update: Sun 08 Jun 2025 08:01:11 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: 0v5TSFxDnkGpgyvqMjVI5m6+hsDw0fiIkx1UlTNJuWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:72:2d:b8:48:61:65:02:27:6e:4a:00:2e:9a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Jun 7 08:01:11 2025 GMT
Not After : Jun 8 08:01:11 2025 GMT
Subject: CN=841b74b60cc20f80fa16f3977b97de9d7f44cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:3b:c3:66:8a:f1:41:58:37:70:c1:03:43:
d7:5a:18:75:03:c6:c2:11:df:45:a4:f5:78:d2:d5:
24:0e:c2:dc:b6:3f:8d:4c:91:00:3d:ed:d3:df:29:
a7:e1:8e:7a:9c:77:6a:2b:26:03:7f:04:af:d8:bd:
69:bd:e7:46:05:5b:f4:0b:6a:24:04:cf:88:7a:54:
5e:39:f5:01:47:9b:03:0c:a7:d9:09:56:ba:9d:95:
7f:f6:cf:d3:46:6b:39:18:f1:d7:af:14:0b:0c:66:
4c:99:cc:9c:7f:37:da:62:aa:ab:4e:9d:a8:26:a6:
5b:e7:e8:4f:2f:4e:8a:e2:61:55:d5:e3:7c:d5:36:
27:b1:e4:1e:90:fe:d7:f8:5a:2b:df:12:48:69:06:
09:39:44:b6:2d:f3:fd:46:1e:6a:c3:69:98:55:6b:
3a:82:7d:b5:89:d0:cf:aa:31:6f:c7:01:a2:0e:7d:
94:d6:d7:63:8f:00:8b:e7:5a:a3:b4:30:85:04:a8:
8c:2e:be:cb:45:60:3a:86:95:33:f2:9c:ce:4d:eb:
82:9c:8d:ed:f8:b0:e9:85:eb:38:56:3e:dc:27:de:
3b:44:36:6d:90:d7:99:97:f5:fa:da:68:b6:d6:a7:
83:e5:e4:77:9d:35:41:cb:89:a6:66:39:8d:0e:41:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:74:B6:0C:C2:0F:80:FA:16:F3:97:7B:97:DE:9D:7F:44:CD:12
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:81:d4:40:16:5d:c2:f4:25:92:e5:2d:84:4b:71:de:19:7c:
ba:11:fb:c2:f4:88:57:56:aa:ca:b2:26:15:08:cc:e1:56:18:
51:ab:8f:b3:4a:aa:58:7d:a0:84:4d:55:7c:19:aa:73:db:2d:
15:a2:b1:64:cc:4a:0c:0f:d1:15:39:c9:ad:93:00:f5:d8:9c:
c3:31:d9:ac:c8:45:cb:d9:ea:db:f8:ff:0a:c1:9b:a6:c6:d5:
a3:70:7b:be:a1:31:28:3a:c9:26:f0:86:f1:88:66:96:12:b2:
1d:b0:c4:2a:0a:ef:dd:da:81:3c:67:cf:ff:f2:fd:72:b0:85:
01:16:90:0d:5b:f7:05:bb:7a:a5:9a:b2:96:fa:08:c4:79:d3:
7c:7d:32:0a:33:a8:e8:0c:f4:30:9a:27:48:ac:cc:76:80:b5:
d0:e9:19:50:ad:02:2c:5f:05:06:5c:4d:96:94:54:ea:57:20:
47:42:76:49:2c:49:1f:b4:e9:e7:9b:dc:06:84:d9:1b:54:41:
90:2f:95:90:7b:e4:a2:49:3c:83:cf:e2:b1:1b:51:99:9b:11:
e3:5d:bf:41:e0:52:3c:85:ca:72:0b:08:44:28:26:7f:95:97:
a7:a0:b3:89:92:44:9d:76:9f:0a:ca:06:f1:b0:cd:5c:14:27:
87:3a:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:21:54 2025 by rpki-client