Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: KN64DffODYItTeEtWbr3RAOD3pN5tHLQCFVrRM3bd6w=
Subject key identifier: C8:92:DA:CD:89:64:6A:24:E8:01:03:D3:CC:FB:F5:56:7C:EA:75:B0
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 01974779CDF94086EB6581651DFC5A39D15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 06E5
Signing time: Fri 06 Jun 2025 23:00:54 +0000
Manifest this update: Fri 06 Jun 2025 23:00:54 +0000
Manifest next update: Sat 07 Jun 2025 23:00:54 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: icUWoLmp2w++kDjpRp4WhKG4v62Pn39sqNitGBL9H1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:cd:f9:40:86:eb:65:81:65:1d:fc:5a:39:d1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Jun 6 23:00:54 2025 GMT
Not After : Jun 7 23:00:54 2025 GMT
Subject: CN=c892dacd89646a24e80103d3ccfbf5567cea75b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:3e:62:5f:6f:b7:df:5d:b4:28:85:36:b2:
f2:00:7c:15:76:46:15:9a:16:61:ff:c1:55:7b:56:
cd:79:bd:b8:c1:98:5b:d6:00:59:85:0e:c4:13:fc:
31:75:ab:c4:87:e1:5c:56:cc:7d:2b:63:87:f8:59:
15:9a:4c:dc:3f:44:ac:a4:f9:7a:ec:5f:e3:45:b9:
b1:fd:3b:bb:38:69:4e:8a:11:29:39:b7:04:77:38:
84:b9:f3:11:68:02:67:9f:16:f2:d1:ab:1c:a1:63:
eb:2a:fa:9e:16:37:dc:6c:64:f8:f2:47:4f:64:cb:
87:78:2b:61:c0:32:e9:8f:9b:63:b3:02:c3:47:9d:
67:bb:98:c6:9f:4f:55:20:d5:c1:29:8e:4b:8e:aa:
cb:a2:96:7a:68:72:3a:50:23:4a:cb:fa:78:fe:37:
7c:48:2b:f6:49:11:95:8a:80:22:95:ee:73:1b:7a:
19:5d:56:45:7b:02:ec:60:28:03:5f:bc:69:f0:95:
c7:c2:f0:60:ce:ef:0c:c0:b1:11:68:5c:09:d8:a7:
ee:e2:df:4f:3b:15:7b:6d:e4:cf:e7:93:85:a7:5c:
e0:56:45:b0:46:f8:4e:a4:64:7b:07:2e:f2:f6:2e:
45:4f:45:45:cc:b0:f9:d0:83:97:1c:5b:f7:ec:f0:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:DA:CD:89:64:6A:24:E8:01:03:D3:CC:FB:F5:56:7C:EA:75:B0
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:c5:da:d5:50:f4:08:45:69:bc:0c:d9:4a:87:63:8d:be:
2d:0d:a2:e3:d4:c5:0f:0d:d7:2a:aa:5f:83:6d:0a:b9:ac:29:
48:e3:b8:7c:14:9c:ba:5a:bb:3d:e2:a7:10:2d:df:42:a1:2b:
0a:59:d0:99:d6:35:d9:df:01:3b:ae:14:0e:5c:e3:f9:71:bb:
48:fc:39:8e:64:07:03:51:97:57:44:c3:d7:bd:ff:fc:29:c0:
2b:75:7c:c4:a2:c7:f1:30:cd:44:74:57:c8:ab:d7:57:0d:90:
f3:6f:a8:c5:01:b9:2e:52:20:f0:5e:83:85:37:8d:d2:4c:2e:
e5:53:d4:17:08:79:2f:33:ae:b5:58:c9:99:ee:e7:ba:04:64:
cd:e5:b4:1d:56:13:10:b1:b8:ae:fe:19:d2:fe:98:31:6f:8c:
ca:76:40:a7:03:90:77:cc:ab:be:6c:71:56:c0:b7:b0:d3:c7:
d3:68:2d:e0:0f:b4:ec:1b:2d:04:68:ba:f7:a6:f2:fc:e5:0d:
88:f2:b6:20:95:4d:bc:9f:b9:18:8c:97:ee:4f:06:39:60:57:
ed:0d:82:95:77:2a:5e:2d:18:d6:b9:96:09:81:bf:65:74:7c:
fe:30:e3:8d:96:7f:ed:69:74:9c:61:ab:63:85:36:7f:5e:e3:
f9:fe:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:15 2025 by rpki-client