Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: 2zCj9kZULGFeXxO/ldJUygwYv8gdLapYK/7o3KZbp9A=
Subject key identifier: 16:CB:23:C5:F4:C7:DD:E9:33:7F:4D:12:E0:97:51:4A:8C:C8:8B:2C
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 0197499F0D332556AC2C287BF3762DE756BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 09:00:49 +0000
Manifest this update: Sat 07 Jun 2025 09:00:49 +0000
Manifest next update: Sun 08 Jun 2025 09:00:49 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: 0NuIBMbsegcF1DBhb4XuMlZG2sO2j3EK1/0XuRzEJGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0d:33:25:56:ac:2c:28:7b:f3:76:2d:e7:56:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Jun 7 09:00:49 2025 GMT
Not After : Jun 8 09:00:49 2025 GMT
Subject: CN=16cb23c5f4c7dde9337f4d12e097514a8cc88b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:7a:3b:4d:2a:be:17:39:93:35:27:31:a1:
44:e3:07:c0:4a:16:09:bb:b7:5b:1e:60:77:0c:8b:
fa:44:d3:d0:ba:65:b6:d2:79:c5:0d:6d:62:95:9a:
37:31:75:88:d4:f2:d7:51:98:63:a1:56:0f:49:1a:
9d:5a:cc:a9:e0:22:08:50:41:30:10:0e:0b:d1:7d:
2c:75:02:73:b9:6d:8f:44:a9:fb:67:da:65:91:3a:
d2:64:a7:8d:eb:7c:bd:27:60:27:65:27:b4:a3:c5:
ba:f1:09:88:c3:88:c3:35:19:91:01:fc:60:8b:45:
49:83:46:31:3b:dc:da:a1:d9:ee:7e:d1:9b:cb:4b:
76:94:b8:5f:d3:2b:b8:5c:95:55:59:38:ff:74:b4:
e6:be:cc:ba:56:5a:3b:04:08:49:a2:45:a4:c7:ce:
6f:78:9c:40:20:5c:a6:a5:86:d1:57:9a:a8:de:3e:
1b:50:63:52:1f:3e:e9:18:d4:79:23:79:1a:cd:58:
85:8c:f1:5e:54:49:af:f4:4e:0e:40:da:9d:f7:8c:
82:de:8b:b5:5d:c1:a5:05:ee:a7:b9:69:64:a6:07:
4f:44:06:ae:d6:81:d0:d7:6d:82:34:1e:d7:f3:f3:
6e:a1:23:e1:04:a1:bd:1b:07:f3:96:ad:e5:e4:28:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:23:C5:F4:C7:DD:E9:33:7F:4D:12:E0:97:51:4A:8C:C8:8B:2C
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c2:86:8f:f3:73:1f:34:d1:b4:46:a9:10:2d:d3:9f:5b:61:
0b:8d:c9:c2:5b:ea:2b:a4:43:4f:5d:9a:10:a0:86:a3:d2:f2:
8f:0c:d3:1e:99:88:fe:b1:7b:a2:6e:73:e6:0f:73:b0:c6:85:
0c:d4:58:9e:c5:7e:5a:e8:42:2e:9d:56:6a:2e:3a:68:ae:78:
f4:7a:7e:3b:71:88:1b:1f:74:c5:79:56:2a:a5:f0:32:75:d7:
a8:0c:2c:1e:13:7d:2e:06:6c:9e:39:3c:3a:07:33:7e:d5:1e:
20:a9:75:36:f3:da:03:2e:b5:90:40:c0:4a:9d:5b:d6:87:f6:
3d:fb:94:21:da:ee:5f:3a:c8:65:ca:33:f2:fe:3d:a4:f5:1a:
eb:fa:f5:12:21:5a:7f:42:ce:f6:da:f5:f9:64:8f:54:b1:b2:
ae:f0:f9:91:9e:e6:76:53:66:02:ee:80:9e:2f:47:e0:da:e8:
d8:6d:10:26:56:3f:21:34:f4:51:64:17:3f:fc:a9:b0:f6:0b:
f5:3e:20:cd:15:b2:8d:d0:44:4e:04:1b:f1:1f:90:da:a2:63:
dc:51:12:27:1f:2a:32:d4:61:ed:67:6b:ca:7b:95:da:74:d6:
3d:51:46:f2:7b:20:e7:48:2f:e8:d3:17:0d:0e:f0:85:d7:b2:
55:dc:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:31 2025 by rpki-client