Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: Ni5d59zAjtdOghIzNcbGf8+9l2ARk+V1rPp69/pbb78=
Subject key identifier: F1:B5:AD:38:AF:0A:55:5F:DB:F7:7F:46:D3:DC:56:1B:09:8D:B7:4C
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 0197488D1053AA545CC139823D5F0CED138E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 0526
Signing time: Sat 07 Jun 2025 04:01:33 +0000
Manifest this update: Sat 07 Jun 2025 04:01:33 +0000
Manifest next update: Sun 08 Jun 2025 04:01:33 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: HQrOMRw4mxpfk1PHSt01FMv7LDXIoRNb17OqfE6gsc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:10:53:aa:54:5c:c1:39:82:3d:5f:0c:ed:13:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Jun 7 04:01:33 2025 GMT
Not After : Jun 8 04:01:33 2025 GMT
Subject: CN=f1b5ad38af0a555fdbf77f46d3dc561b098db74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:d2:fd:96:70:6d:3d:26:90:9b:d1:c7:92:
42:a6:90:0a:07:70:5b:68:b7:4c:4a:7e:38:2b:6a:
d9:38:21:c7:e9:39:44:df:a6:7a:a6:7c:e1:e6:4f:
19:5f:c1:70:0b:ac:22:d2:48:69:d7:be:e8:2f:16:
39:85:e1:27:7b:e4:2a:78:c4:89:de:72:6c:95:19:
6c:67:c4:f0:cd:e2:01:6b:df:64:5a:d2:a3:2d:6c:
91:c0:5e:97:b6:ec:42:87:f2:d5:c4:5d:79:95:06:
7f:95:ad:0a:9d:8e:56:b0:e9:41:c3:12:8e:d6:ce:
76:1a:ce:63:c8:b0:3d:dc:69:14:22:01:84:1d:ce:
7a:5e:33:6b:d7:e2:9f:1a:fe:00:a7:4e:0e:90:59:
3c:76:fc:54:5b:b4:81:e6:37:72:14:1c:bb:a5:b3:
3c:ee:23:e0:cd:15:9b:4c:12:06:25:8e:46:26:a2:
76:44:73:3e:8d:1a:19:1c:a2:5b:f8:6e:3b:e1:7c:
06:8e:79:f6:b7:07:72:e2:16:4e:56:0e:33:32:ca:
cb:af:e6:b9:d8:86:24:7d:19:f6:93:88:d6:6d:cb:
b4:77:86:38:2b:29:b3:ed:1e:97:cd:f1:fa:00:89:
04:cf:37:66:27:ab:ad:09:88:a6:c7:1d:b9:49:99:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:AD:38:AF:0A:55:5F:DB:F7:7F:46:D3:DC:56:1B:09:8D:B7:4C
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:86:de:ab:63:03:03:f7:93:90:e5:7c:da:9e:7b:50:89:
dd:d5:26:a8:d0:53:62:19:15:e3:5c:48:a8:1f:ff:df:62:8f:
6a:82:f4:6c:4b:f7:06:0a:73:ab:af:c2:f0:76:83:c0:81:f2:
18:c5:6c:e2:eb:4c:b7:b3:d3:65:70:42:1f:a5:72:13:62:bc:
d4:06:81:a9:e5:e5:5c:f1:b2:96:4b:c4:8b:11:db:ca:b8:d8:
b7:2e:2d:f1:6e:11:4a:31:20:62:94:d7:93:da:1c:e2:55:76:
65:cf:62:b9:e1:95:67:56:62:ab:c1:88:8b:c4:42:b8:79:88:
c5:1b:97:3a:ba:47:48:a7:6d:1d:9b:e8:8d:40:3b:68:64:a3:
f4:00:7a:9d:5e:b3:7f:71:90:2f:80:21:ca:29:78:34:c9:b9:
50:60:27:30:ab:a9:63:c0:ca:de:4b:34:28:bb:3d:2c:7d:01:
35:f9:1c:58:66:26:2b:0e:4e:3c:ee:2c:70:62:33:41:56:2a:
3b:9e:c9:15:69:e8:e2:45:26:fd:36:d7:49:25:fe:43:6d:a7:
82:cd:ca:07:dd:ad:ba:14:92:e9:fa:ff:81:10:bc:02:b7:10:
f9:d5:d2:23:f9:fa:60:5a:57:e6:6a:17:e0:c0:e5:cb:aa:f6:
0a:d2:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:23 2025 by rpki-client