Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: LIfjKUDMABn60w5+6G+5knLdq1NLnLNHM6nbNPJaTEU=
Subject key identifier: 7F:79:FA:2E:49:B0:8C:8F:DE:E8:EF:38:99:6E:71:C1:ED:9B:EF:F5
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 01974742983D3CB67AC9A12A9C28E9003A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 22:00:36 +0000
Manifest this update: Fri 06 Jun 2025 22:00:36 +0000
Manifest next update: Sat 07 Jun 2025 22:00:36 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: ACqBZG0W5xK8lKy+LzID4UUDKi0UDsDcltmHShBsvNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:98:3d:3c:b6:7a:c9:a1:2a:9c:28:e9:00:3a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Jun 6 22:00:36 2025 GMT
Not After : Jun 7 22:00:36 2025 GMT
Subject: CN=7f79fa2e49b08c8fdee8ef38996e71c1ed9beff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:84:73:4a:90:98:9f:b3:63:a5:20:3e:e9:
2a:03:01:86:18:57:05:1e:60:e7:ab:0c:8a:fb:3e:
21:e5:1b:7d:98:4c:52:6d:37:13:67:df:02:60:04:
a1:5a:e7:79:a0:e3:4a:33:9b:fc:df:46:7d:fe:39:
31:44:f2:79:1e:8c:b7:e2:20:e3:00:5a:fe:a4:a5:
51:61:f1:34:b9:32:83:54:11:eb:fd:00:4d:d7:c1:
ce:32:00:21:e8:f1:00:06:e0:82:ea:7a:6a:c4:ba:
76:7b:25:95:ef:1e:af:04:e5:01:27:55:3e:f4:03:
c5:5a:c3:87:a9:15:96:61:c7:94:ac:35:db:93:5a:
9e:a2:40:98:99:43:c0:a6:b3:eb:fc:73:90:b2:2f:
56:fe:47:d6:6f:f5:2a:e6:35:11:cf:4d:ae:2e:c2:
8a:80:64:5d:f1:9c:e8:05:03:53:7b:9d:77:21:3f:
b1:98:64:10:7b:bb:39:fb:d9:a9:49:90:85:20:82:
ea:7a:da:f7:48:75:f2:cf:ab:bf:42:16:2a:76:06:
a0:bb:6d:e4:e1:18:d3:0d:e2:3d:c9:7a:ac:60:68:
6a:d2:56:42:63:dc:88:83:8e:5e:45:d8:e7:28:eb:
64:df:fd:11:18:f4:df:65:5e:47:92:8d:c6:ed:b1:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:79:FA:2E:49:B0:8C:8F:DE:E8:EF:38:99:6E:71:C1:ED:9B:EF:F5
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:b5:99:ff:b0:9d:02:3a:00:b9:ea:ad:5e:ad:25:75:0c:
16:3b:ea:0c:e0:7d:8c:d0:0f:95:83:04:34:ba:25:04:99:e0:
d6:ee:09:28:87:51:bb:bd:52:0c:aa:6c:bb:5b:d3:97:dd:b8:
f2:f9:2e:e2:9c:94:71:e6:1e:60:f9:3b:c1:8a:95:26:4f:6f:
80:f7:49:9c:90:e3:02:85:1a:a8:78:be:13:11:78:19:f7:39:
6c:99:12:e4:93:51:58:85:dc:00:de:04:6e:3e:db:b3:ca:2b:
f9:09:6c:d4:55:89:98:82:6d:2e:94:8b:aa:0e:33:01:a2:f4:
df:f3:fd:42:3c:98:0b:67:ac:f2:81:95:f0:94:a1:0f:e0:e9:
4e:dd:b5:a0:c1:b2:7d:50:e4:d3:c9:45:a7:9e:0a:c3:fa:df:
f3:82:5f:33:43:16:0c:86:e4:33:9b:f5:1a:81:f0:34:29:a1:
6e:41:b3:dc:e5:e1:6f:c2:22:b9:1e:70:64:37:3e:d2:22:44:
9e:6a:cc:78:8a:62:a1:ad:ef:ad:79:62:c9:56:c7:8e:c9:97:
5f:fd:a4:8e:d4:b2:60:6e:80:25:93:20:06:f4:f4:09:d3:08:
61:fb:b2:f7:db:a3:00:da:9a:b9:37:88:1d:83:ef:81:e2:e8:
8c:f9:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:25 2025 by rpki-client