Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: IlSk9OTdoBXnCgzvrHAzVVZTjD38SdfB0DMjX2U8AXI=
Subject key identifier: B6:1D:63:87:19:DF:E5:B3:20:41:78:17:4D:EF:08:95:7F:E8:2E:13
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 0197B96B0F05F1D2559AEA0410806842B9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 13E2
Signing time: Sun 29 Jun 2025 02:01:30 +0000
Manifest this update: Sun 29 Jun 2025 02:01:30 +0000
Manifest next update: Mon 30 Jun 2025 02:01:30 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: e5KoN65th4ceikv/uxlOBBKDiBhTlnPnU5G5rDQBoq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0f:05:f1:d2:55:9a:ea:04:10:80:68:42:b9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Jun 29 02:01:30 2025 GMT
Not After : Jun 30 02:01:30 2025 GMT
Subject: CN=b61d638719dfe5b3204178174def08957fe82e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:2d:58:5f:cc:16:ae:ff:ef:04:58:fa:df:
52:60:80:ee:4b:bd:52:4e:66:75:8e:ca:67:19:c4:
61:28:b4:fd:cf:07:bb:0e:3f:78:78:08:a1:7b:d1:
3f:7e:1c:ef:c4:3c:6b:34:0f:1c:99:1b:6e:30:4d:
5c:09:01:3a:56:50:8d:96:4a:ce:3e:0b:5d:41:57:
d8:7a:c3:7b:a5:a6:f8:66:a1:6d:f3:16:dd:c3:39:
f8:82:5d:ee:85:15:b8:54:df:4a:80:32:bb:77:73:
d8:99:b0:7c:b4:6a:92:25:93:db:8c:b9:2f:11:0e:
7b:1b:8e:2e:d7:82:a2:fd:a0:21:6b:cc:68:cd:5d:
d8:6c:42:8f:fd:49:f2:d9:1d:08:33:a0:09:6a:bc:
9e:b8:0c:59:ed:6c:8e:6e:b9:26:97:5d:65:23:b2:
56:ba:65:83:c7:3a:1e:76:20:3e:95:67:e9:b3:ca:
0a:f8:a4:d9:06:49:1e:38:d5:47:be:d7:73:7e:7e:
e9:33:77:bc:90:b3:5f:e9:d0:0e:f1:c6:4e:e1:ae:
1a:9a:48:7c:df:ab:f4:a4:cf:9d:e6:b6:07:35:b9:
2e:65:31:e4:72:e4:33:cc:53:36:22:bd:b7:76:3e:
15:87:64:38:c4:3a:c2:35:94:fb:eb:f4:95:dc:c9:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:63:87:19:DF:E5:B3:20:41:78:17:4D:EF:08:95:7F:E8:2E:13
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:93:6c:25:fa:39:1b:1c:d3:6b:fb:3d:51:54:3d:65:4b:87:
4c:a5:e4:25:4c:59:73:24:ca:95:c4:7f:eb:79:9b:6d:3b:98:
77:18:68:d8:e2:36:a8:1f:c1:64:b7:f5:7b:2a:9b:e0:40:7d:
93:fb:59:ad:58:d9:c8:11:1d:0a:26:54:1c:7b:4d:08:56:c0:
7b:4e:03:b6:64:de:51:07:c9:f6:81:7d:17:39:e4:9a:a3:d2:
1e:8d:56:8a:d4:9b:23:94:be:6a:1f:95:4c:32:df:e6:9c:6a:
7e:6e:ff:a5:37:b0:58:e6:60:9b:80:4c:cc:8b:4b:55:14:0b:
d6:f1:28:89:e7:8a:81:09:1b:19:bc:c4:d9:34:75:e4:0d:f1:
db:38:35:52:b6:f8:79:e2:92:61:59:d2:61:b1:90:66:e5:d6:
d3:ff:69:a0:85:2a:69:c0:0e:04:02:46:65:d5:09:f2:c3:21:
75:28:ea:d6:74:93:97:09:8b:0c:15:c1:c9:26:70:e2:ef:18:
d8:13:17:78:a4:89:4d:8c:cc:ad:41:00:7f:2d:e4:d5:3c:8c:
09:87:4c:3e:be:12:fe:eb:0b:7f:3b:a6:b1:7b:24:32:ca:e1:
c3:5f:e7:2c:58:62:d1:ab:63:8f:e9:b2:0a:50:50:97:eb:3d:
5e:9a:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:45 2025 by rpki-client