Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: uS9/03FgHyg/XRw0XZNI1nLuI+99LnKVSJ9B0fQNd+M=
Subject key identifier: 58:76:0C:F1:72:CF:B8:3E:69:A8:0C:4F:23:D2:67:31:9E:67:BF:5B
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 0197493137088DFADB65DC3AE08930FEDD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 07:00:51 +0000
Manifest this update: Sat 07 Jun 2025 07:00:51 +0000
Manifest next update: Sun 08 Jun 2025 07:00:51 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: Wg7SJ8Gwl+ZoTDu4lzrTyTnvpaeyihNKX5Zj7H95TfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:37:08:8d:fa:db:65:dc:3a:e0:89:30:fe:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Jun 7 07:00:51 2025 GMT
Not After : Jun 8 07:00:51 2025 GMT
Subject: CN=58760cf172cfb83e69a80c4f23d267319e67bf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:d7:c2:5e:cf:78:c6:90:7c:15:49:a2:72:
36:f8:f4:0c:a4:74:dc:f4:45:16:47:67:ba:32:a4:
2d:e6:82:bc:9f:cd:9b:e7:b4:01:49:d8:e0:23:50:
fe:a7:9d:74:ce:b7:1c:a9:31:29:45:fb:b7:46:a6:
1d:f0:f5:46:29:10:a9:f6:0e:99:83:9d:9b:fd:a7:
49:b1:73:a4:e3:ba:96:b1:4f:40:f4:f3:75:66:4b:
3b:d5:5c:2a:20:ce:fb:82:d9:40:bf:2e:86:f6:ee:
a8:ff:12:88:0d:f1:a6:3b:9b:73:d8:8a:af:f4:8a:
a4:84:56:fb:72:69:62:58:c9:e1:6d:72:21:e1:b0:
f1:ff:c1:88:c0:d5:d1:ef:e8:01:0a:aa:f8:95:ed:
95:19:ce:34:77:f2:67:2b:40:53:06:c1:d2:ec:15:
28:c9:bc:6a:02:c9:70:54:22:6c:b1:83:2e:fc:62:
62:be:b4:97:16:e3:22:b1:cb:ec:d2:64:62:93:6c:
ec:d2:70:66:e1:58:ad:1f:d9:11:70:6d:36:21:cb:
30:a0:1c:b3:8c:de:8e:00:79:8c:ef:39:1f:78:e0:
a1:41:42:6f:db:85:d0:70:16:e1:9c:6f:fb:70:49:
0e:c1:90:f8:e9:5c:4e:34:ca:a8:13:f1:b7:38:17:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:0C:F1:72:CF:B8:3E:69:A8:0C:4F:23:D2:67:31:9E:67:BF:5B
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:47:5d:6c:15:da:b7:3d:6b:38:f6:3e:f4:6a:ce:c7:20:b6:
35:53:6d:7f:1b:20:3b:9c:14:2b:cc:0d:94:19:7a:6c:23:20:
96:f1:02:cc:bb:96:2a:b7:8b:c4:d1:a1:6a:c2:69:d1:12:4a:
e6:0f:83:68:1b:f5:b8:b8:0b:ad:22:3d:dc:03:27:95:1d:aa:
01:94:dd:f4:80:09:22:d0:a3:fb:3f:1b:86:f2:6d:bd:de:37:
5b:25:29:ef:e2:57:b1:27:fa:5e:f3:0e:3c:c6:9a:53:52:97:
de:f1:de:90:d3:9a:0d:46:4b:5d:f5:d3:cf:03:e8:0d:e4:c1:
c1:a1:66:14:dd:d2:18:a1:98:97:aa:c2:d7:77:65:08:7f:a4:
4d:5b:d1:2f:3f:f8:d8:30:cd:fe:78:6b:75:34:ee:46:85:a0:
5b:15:93:bb:e2:7c:14:a1:bb:4b:1b:92:a1:ba:3e:45:86:cf:
61:5b:72:1e:4c:3e:44:10:95:9b:d3:5a:f7:fc:02:1f:38:b3:
41:46:9d:cf:b1:55:37:d0:6c:2b:3e:f7:fd:47:7e:8b:68:64:
d0:96:18:b6:27:1c:97:a3:1b:7e:54:66:e7:80:0e:56:52:5f:
cd:9f:8c:34:ba:b6:cf:c7:61:12:98:4c:99:0e:8c:de:da:e2:
26:2e:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:11:00 2025 by rpki-client