Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File: jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier: V2dLeRcZq7p6vkqGBNXOu/YxnRnOi/p4/qlEbg1dfaY=
Subject key identifier: 51:1F:B4:2F:A1:48:D1:66:5D:73:2B:D3:3D:EE:25:5E:8B:67:F2:54
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer: /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial: 01974C3225CC175732D38E51357E058A58CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 21:00:43 +0000
Manifest this update: Sat 07 Jun 2025 21:00:43 +0000
Manifest next update: Sun 08 Jun 2025 21:00:43 +0000
Files and hashes: 1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: BzxnvsakmMTkAnGqX0uotW8u+7NehSJ1h0lqp57ZmLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:25:cc:17:57:32:d3:8e:51:35:7e:05:8a:58:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Validity
Not Before: Jun 7 21:00:43 2025 GMT
Not After : Jun 8 21:00:43 2025 GMT
Subject: CN=511fb42fa148d1665d732bd33dee255e8b67f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:aa:6d:83:f7:21:9d:1e:92:2f:9d:96:f7:
c5:51:97:c0:a8:61:ec:9d:e4:10:92:68:9e:f3:7b:
4b:b9:76:f0:80:a5:dd:0e:40:b2:0a:25:84:0c:ad:
e3:f3:2c:54:94:3c:96:60:86:05:5f:55:bd:b4:5c:
01:ed:b8:4f:5e:95:82:c2:a7:ff:84:92:d9:bf:32:
b9:1d:79:49:ec:a1:18:09:e8:4b:a4:83:1c:ce:d2:
96:a9:34:72:f8:45:3a:28:6f:c0:5d:e8:6c:6f:65:
48:5f:b2:c8:86:dc:b4:b3:5c:18:4f:5b:f2:0d:ec:
57:b5:81:d3:01:ab:e3:f2:ec:78:bc:f1:43:b2:68:
c5:fb:9a:ec:f9:fc:89:f1:4e:80:38:cb:2c:5f:42:
ec:06:c9:71:5e:63:13:f1:5c:66:a0:1c:be:9b:9a:
ae:05:f7:43:d2:f5:3b:d6:7d:e6:a8:d4:0a:ea:36:
7a:c5:28:4d:1f:15:44:a6:ea:a6:6e:f8:c9:1b:60:
17:c7:5a:94:1f:03:a1:3e:32:64:53:7a:ea:8f:22:
3a:3b:c4:4d:cb:d2:97:9b:28:c6:f7:a0:d9:76:f7:
d7:86:7d:59:15:59:d9:e9:fa:71:10:53:f3:b3:e1:
17:bf:2a:2a:4c:e9:2d:ad:f9:38:0e:2f:e6:39:32:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:B4:2F:A1:48:D1:66:5D:73:2B:D3:3D:EE:25:5E:8B:67:F2:54
X509v3 Authority Key Identifier:
keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e5:2b:2b:b0:24:8a:45:2e:8a:90:8e:8a:c5:f4:44:44:6a:
8a:51:32:f1:94:75:ee:b4:73:f2:7e:13:31:f9:e6:f6:4a:28:
31:83:d1:4e:e6:a3:d2:a1:a2:84:7b:fb:63:dd:9f:0c:19:65:
84:f3:b3:bd:64:36:d9:6a:b6:cc:68:91:c8:41:67:d2:24:ac:
94:23:69:4b:e6:be:da:5c:20:a4:bb:2b:6a:5f:ed:43:88:27:
34:dc:1b:b5:9a:43:ea:0a:d5:f4:9e:5b:ed:07:f2:a4:34:94:
c2:14:51:9d:c6:e6:45:39:7e:a9:33:fe:24:3d:20:3e:08:3c:
1d:6e:c3:93:a3:a8:f6:b9:6a:e4:f3:54:c7:9d:0a:56:d0:5b:
de:84:48:43:00:24:4c:42:5a:fc:06:33:42:63:eb:95:ba:85:
1d:06:8d:1b:01:bb:24:17:02:77:24:da:29:6e:7e:a3:99:85:
c8:fa:05:89:38:15:6b:a9:bf:e5:fc:ef:da:91:1e:fe:8f:eb:
18:ca:54:ba:c5:67:de:93:50:75:6e:dd:41:f9:28:28:b5:a6:
59:19:31:48:7a:d4:65:ba:f2:2e:67:de:28:9d:a4:dc:e5:22:
c6:8b:c0:e3:05:52:43:57:70:d0:f6:6d:1b:0d:01:e1:60:1c:
17:35:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:29 2025 by rpki-client