Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: TBLQKaI0t3wOCbkXKDfdVk4SsZ7vCo8a9cDv/vgMygM=
Subject key identifier: 8A:AA:F2:4E:38:6B:7E:86:A2:5F:92:9A:11:69:EF:AC:DD:78:11:E5
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 019749D5B90DC2B545D0278F681C6ACF04AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 0615
Signing time: Sat 07 Jun 2025 10:00:32 +0000
Manifest this update: Sat 07 Jun 2025 10:00:32 +0000
Manifest next update: Sun 08 Jun 2025 10:00:32 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: RAh+zvOSMVaVm6ZxWOcE/nk1DU/MFD/SuiMmQ3trCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b9:0d:c2:b5:45:d0:27:8f:68:1c:6a:cf:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Jun 7 10:00:32 2025 GMT
Not After : Jun 8 10:00:32 2025 GMT
Subject: CN=8aaaf24e386b7e86a25f929a1169efacdd7811e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:87:02:6f:d0:25:fa:88:2e:63:b5:9d:d9:
9c:83:1c:fb:80:9e:6e:95:5c:3d:02:d0:c4:a0:5b:
bb:5b:8e:c0:f9:27:b0:2d:56:fd:9b:53:f4:19:80:
87:ff:c9:0f:b3:66:85:dc:6e:31:33:da:fa:38:70:
65:1f:d4:89:b0:4a:e1:3d:2e:07:7c:83:ef:33:e5:
d9:ce:21:52:e4:fb:4a:87:1a:98:8b:39:ce:98:6c:
22:0b:0d:f2:97:98:bf:9a:53:bf:79:02:cd:9d:b0:
2c:e9:e3:18:b5:5e:8c:61:2b:55:a5:95:e7:f3:2b:
7a:20:7e:81:e7:ee:c8:bb:10:35:4b:92:f0:3e:d8:
4b:5d:b2:88:77:a6:ce:39:f4:93:7e:ea:c7:f2:9e:
f0:ba:cd:ef:fa:0a:28:52:4d:bd:04:ea:01:43:da:
ec:74:fa:8c:90:7d:d1:0a:bb:0b:c6:05:ed:c3:11:
a7:cf:1c:63:5c:0b:9b:83:25:9b:82:a2:a8:82:2f:
a0:06:34:bd:69:c4:ce:f3:e8:4c:f8:74:6e:18:a8:
8c:ab:00:19:7d:c1:52:f2:43:7b:3a:b0:8a:d8:a3:
6a:1b:a2:c3:29:68:5f:27:9e:ac:8f:78:90:7f:cd:
71:c1:a4:21:7c:b7:4d:69:1f:ba:85:ac:a9:f4:82:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:F2:4E:38:6B:7E:86:A2:5F:92:9A:11:69:EF:AC:DD:78:11:E5
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3b:67:39:28:2f:b1:1b:81:fc:44:d3:17:47:85:f2:6b:a6:
a7:a2:02:d3:d8:7d:b6:3b:b4:d8:d0:f2:6c:d1:76:eb:2a:a7:
f0:50:70:18:f4:b8:ea:e1:08:de:66:62:1a:4f:03:7a:96:52:
29:d3:75:81:34:7b:ca:fd:81:3c:47:6d:be:a7:0e:2e:e9:3b:
72:d0:a4:53:df:0f:2b:0d:ad:45:96:c8:76:a7:6c:a6:3a:3d:
ce:d3:1f:a8:0f:25:6a:d2:83:af:a3:ab:86:93:37:cd:8b:0d:
64:a1:65:25:35:f0:61:ab:27:ff:dd:03:35:10:87:41:fb:2f:
f6:a8:18:9e:2f:62:8f:c9:d2:90:b6:7a:e2:1a:dd:f1:85:ed:
5c:fc:8e:8b:13:80:8e:ed:3b:8b:d9:4b:11:d4:55:7a:38:68:
4f:38:47:6d:60:67:a5:4d:9f:53:0d:4f:8a:62:36:79:21:a6:
dc:10:90:e3:fd:86:fc:01:7a:12:1a:62:a3:89:5b:d4:dd:7c:
e3:1c:59:8a:f2:e9:e4:17:3c:15:b2:71:83:3a:14:56:dd:60:
c0:e9:42:0f:12:ae:1c:25:10:72:16:fd:e8:7c:65:1f:a0:4b:
db:6b:a7:7a:91:13:30:b3:d0:55:80:28:c7:34:c4:d2:09:3d:
ce:5b:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:58:55 2025 by rpki-client