Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: Cf3i3uFquqnBPVqUl9+7GDolaq6MDUKNwNnM5l0n9x8=
Subject key identifier: 9C:0F:F0:51:39:A2:AB:FF:DF:E8:DF:C5:0A:3B:E3:5E:BD:30:7A:15
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019747E7C071BB779E6B6EBDC02248D7DE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 0EAD
Signing time: Sat 07 Jun 2025 01:00:59 +0000
Manifest this update: Sat 07 Jun 2025 01:00:59 +0000
Manifest next update: Sun 08 Jun 2025 01:00:59 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: e0/lsLTk5aaZl2Yq1HDp/XBQyXf0qz/gqCwjMkk4b14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c0:71:bb:77:9e:6b:6e:bd:c0:22:48:d7:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Jun 7 01:00:59 2025 GMT
Not After : Jun 8 01:00:59 2025 GMT
Subject: CN=9c0ff05139a2abffdfe8dfc50a3be35ebd307a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:f1:7e:98:66:20:34:6b:96:64:e7:b8:60:
35:a4:d8:3e:72:ec:f4:0c:12:a1:64:d5:ab:7b:77:
17:b8:ef:0e:84:fd:9a:d7:1d:bb:5d:df:b9:be:80:
f2:d0:3b:6f:f4:d9:3a:d7:57:7a:2a:e8:ac:c6:ee:
5c:5f:23:a5:c5:c1:60:b8:ec:ab:62:3b:7a:61:df:
13:27:0b:9b:f5:4e:11:56:31:60:ef:85:89:dc:71:
6a:6a:a6:a4:d9:84:c4:e3:f7:dc:75:1f:03:86:20:
43:f9:56:9e:16:ed:f2:da:bc:2b:80:77:ad:54:a3:
47:be:a6:cf:7f:64:44:59:56:41:71:89:28:a5:c5:
f7:cc:07:f1:83:a1:8d:f8:04:2e:91:67:8d:a1:50:
2a:6b:db:ab:2c:44:12:98:63:33:27:1c:c1:c3:58:
53:8e:5c:08:a9:b2:bf:18:43:be:01:91:96:59:79:
73:e9:c1:2b:44:3d:86:10:74:84:d6:34:1e:98:6c:
d6:dd:54:f6:7d:0f:02:54:30:5e:7c:43:ce:5b:2a:
95:aa:0e:a4:8d:0c:b5:db:cd:d7:a7:20:e7:d3:86:
0f:38:8a:a4:6d:21:4a:39:46:f4:81:ae:e0:d5:71:
af:19:16:1b:d4:3a:03:aa:d4:c3:97:0a:6c:fd:9d:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:F0:51:39:A2:AB:FF:DF:E8:DF:C5:0A:3B:E3:5E:BD:30:7A:15
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:78:48:de:0b:0f:2c:5a:e5:80:44:83:c1:34:30:5a:45:68:
9a:8d:03:9d:f6:0d:9e:77:f2:68:a1:4b:2a:34:50:c0:69:ef:
c0:b6:18:33:c1:23:9d:7c:52:92:a8:6f:36:6e:a1:21:6c:2a:
f5:0a:2a:55:01:1e:0c:3b:0e:ed:4c:93:59:a1:a3:56:00:0c:
e3:0e:08:c2:38:34:b1:f5:d2:4c:1c:49:d2:93:51:51:71:ce:
29:cb:66:5f:4a:6f:71:d5:e9:91:14:06:79:42:8c:34:dd:c3:
49:dd:01:d4:df:9d:6f:ad:d0:b9:69:f0:df:26:a7:c5:7f:8d:
5b:92:16:77:c1:03:fd:f4:db:4b:2d:ee:fa:50:b0:5a:2d:86:
b8:95:5c:25:cc:66:9c:98:53:39:99:40:ae:83:06:f7:91:5c:
c1:1b:67:f6:73:bb:15:22:eb:65:37:97:b1:bb:85:c1:dc:3d:
50:b9:2b:79:39:5d:e8:f3:4f:c6:5d:63:ec:7a:17:3f:28:1f:
33:2c:cc:43:e6:4e:50:97:7e:1e:ed:5e:41:58:59:9d:db:b8:
28:b3:45:19:e9:c4:00:d1:e1:50:81:3d:e4:3d:30:23:3b:75:
da:17:86:26:5b:37:2b:e2:63:c7:dd:76:ae:9f:10:61:0f:2b:
d0:5e:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:30:22 2025 by rpki-client