Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: 8XsBo69+T4BPk1k2b2tTHDoOvscYa2Xbegn0Wf6P1MU=
Subject key identifier: 03:7C:01:F8:91:43:E4:BF:5A:F1:E9:AC:BA:6F:D3:C2:74:95:7E:C5
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 0197504650EAA3085F8F7D0C7C0CE1C5A9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0B28
Signing time: Sun 08 Jun 2025 16:01:14 +0000
Manifest this update: Sun 08 Jun 2025 16:01:14 +0000
Manifest next update: Mon 09 Jun 2025 16:01:14 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: YQ11GcKpaiehMyUH2hk18zxQAkBEyJTnySRdlIUFXv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:50:ea:a3:08:5f:8f:7d:0c:7c:0c:e1:c5:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Jun 8 16:01:14 2025 GMT
Not After : Jun 9 16:01:14 2025 GMT
Subject: CN=037c01f89143e4bf5af1e9acba6fd3c274957ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:9d:c3:76:7e:8d:be:28:97:30:92:aa:34:
b3:68:9c:95:e0:5e:66:be:ba:ea:5b:a5:0f:e7:a4:
e4:6d:a5:5f:ff:f0:1e:c3:6e:0d:b5:33:90:5d:53:
57:0d:3f:54:d1:2c:52:ba:76:76:f7:bf:15:2c:b4:
78:bb:7f:a4:bd:02:7a:e1:b7:2d:a5:c1:0f:62:db:
82:4e:73:f7:17:39:98:16:bb:4a:67:66:c6:af:a5:
dd:7d:db:88:f6:1a:e3:8a:48:8d:be:4c:65:d6:62:
b8:b1:2f:58:15:b7:20:6b:3b:6b:4e:a0:25:c1:3e:
b4:09:f8:ad:11:d2:c8:cf:f9:e4:20:51:c7:88:e2:
43:4f:9d:81:f7:68:d5:8a:b0:ae:ac:ff:4a:ac:63:
16:c6:21:c2:dc:a2:51:0a:78:8d:ed:39:a9:0f:af:
fd:b1:96:f8:db:7d:5c:1c:b1:0d:a1:3c:09:cc:32:
5c:f1:5e:1e:ab:e6:a3:b0:f1:aa:02:43:0e:57:c6:
96:f0:75:2b:85:d5:29:43:fe:51:09:4c:65:af:e3:
d9:3f:eb:ac:05:fe:01:6c:30:0c:68:b8:5a:61:0d:
cc:3b:7f:29:eb:bf:89:a4:37:7a:1f:6a:c2:d4:5d:
5c:16:03:76:98:47:3b:10:97:b4:35:f5:15:79:dd:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:01:F8:91:43:E4:BF:5A:F1:E9:AC:BA:6F:D3:C2:74:95:7E:C5
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:67:72:7a:18:0b:83:be:63:c8:ca:b0:3e:46:b8:8e:03:
66:4a:f9:b6:2c:72:cd:75:48:43:96:18:f2:a6:2b:f1:be:57:
84:b6:04:0c:2c:bd:27:39:ee:15:c2:8f:df:ea:bb:a4:9b:44:
fb:bc:1f:5d:90:99:30:08:52:14:1f:dc:d8:17:a0:9b:45:28:
c0:f9:e0:b0:b1:88:49:55:32:9a:24:61:e7:ae:aa:bd:84:ab:
b0:82:b2:3c:96:a0:c6:48:b5:6e:0e:18:fb:9f:76:bf:28:23:
bb:08:2c:61:f4:65:f7:c4:76:eb:af:4a:1e:c3:4d:a8:5a:bd:
e8:88:32:da:16:55:0b:39:1c:d9:1e:f0:a9:ba:89:d0:ca:65:
8a:be:49:5d:df:7b:23:d3:12:a6:46:0d:2b:83:cb:7e:9e:d5:
9c:76:07:2c:30:e1:1d:6b:9e:2a:85:7c:d9:67:ef:25:6b:e5:
3b:b4:af:63:28:60:33:2b:04:52:97:73:98:81:72:ad:93:e0:
18:ef:b6:37:2a:80:e4:0f:fb:df:38:67:cd:57:0a:f3:67:ea:
e6:67:38:38:71:18:7b:b8:8e:ee:9e:e8:20:cb:13:7b:6b:fc:
74:2c:39:c6:64:46:fb:1d:d5:1d:45:ad:fa:fb:4e:d4:39:76:
04:f5:9d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:37 2025 by rpki-client