Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
File: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json)
Hash identifier: nyIfuAynJdBaHCQCM/oce8Si+Ti75/afy9VJpvkiFYk=
Subject key identifier: FF:EE:75:D3:84:68:76:9C:51:4E:A5:2B:BC:82:3D:1C:1E:92:4E:9E
Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
Certificate issuer: /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Certificate serial: 0197B6A1320E24B9989812B22E8A6674D40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: weov3W+NdrOMPNt8T3sHdJpTO2GtyiTuAwTl71z4TVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:32:0e:24:b9:98:98:12:b2:2e:8a:66:74:d4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=ffee75d38468769c514ea52bbc823d1c1e924e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:ae:43:d9:51:bf:6a:77:cf:1b:71:72:3b:
9c:27:ec:51:c3:7f:80:93:ed:ef:a1:91:f8:f8:ba:
4c:18:01:8d:d6:61:9a:3f:95:73:61:2f:8a:d6:93:
78:68:c5:91:17:7d:bf:0d:ea:53:7f:ce:b6:2b:80:
7f:65:cb:d3:b7:ff:25:03:36:3e:53:bb:95:52:a5:
ca:f2:e7:db:c6:88:7e:b7:3a:67:b6:a5:07:18:5d:
89:6e:d7:8f:73:33:2c:99:3e:85:f8:b7:81:71:61:
a2:0f:0c:a5:8b:fa:d8:2c:c6:91:30:bc:f2:34:a5:
ba:4d:ff:42:5b:16:20:a7:b1:0b:67:ef:64:e0:ea:
41:50:9c:b1:41:b7:72:39:21:bf:3e:6b:43:ef:c9:
ec:aa:fb:a0:af:89:92:81:0c:fd:f9:a1:7b:42:d3:
28:81:cb:b7:82:13:ed:c0:42:a0:2f:c9:ff:ee:af:
c3:4b:67:ce:4c:c0:2c:51:3f:75:b3:4f:b8:90:06:
ce:d6:6f:9c:1a:29:fb:06:aa:c7:39:db:91:e6:8e:
5e:4e:9c:db:e2:05:77:03:01:98:64:fe:9b:90:a7:
e1:ce:bf:06:b2:21:fa:a8:27:8c:98:34:e0:19:44:
85:db:e9:f4:5d:81:bd:16:3f:66:79:53:ef:01:44:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:75:D3:84:68:76:9C:51:4E:A5:2B:BC:82:3D:1C:1E:92:4E:9E
X509v3 Authority Key Identifier:
keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4c:cf:4b:fc:e3:56:57:2d:14:33:50:20:cf:bb:35:0d:e7:
06:e2:99:6a:66:cd:a7:48:2a:f9:dc:de:ad:8c:a9:ac:3a:24:
af:92:97:0e:35:60:47:70:de:08:78:82:aa:37:b4:3a:ca:d6:
12:6d:f3:fd:a4:99:86:eb:84:ca:88:bc:89:3a:ae:f8:e2:8c:
db:47:e3:9b:4b:45:36:6c:13:4e:2b:97:29:68:6d:04:70:14:
86:f4:08:49:41:f3:16:4b:27:8f:fb:29:6d:b7:10:56:c7:94:
fa:3a:bf:d2:23:ee:12:c2:dc:11:f0:08:16:37:8e:a1:db:4a:
61:ab:b2:71:55:99:81:95:0c:cf:e6:10:98:dd:86:06:95:59:
87:41:12:5d:67:ef:77:04:40:ea:cf:11:3c:a2:bc:27:94:67:
fa:2c:1b:65:22:fc:a4:c7:1f:09:b7:34:61:4d:8a:58:34:b8:
bf:ca:6e:a0:8c:28:d9:9f:bc:9a:97:f1:3c:e6:78:fb:8b:a0:
74:9e:80:1d:19:dc:6a:d1:90:e8:83:37:73:91:41:4f:51:ed:
77:a0:bf:07:1b:6f:12:59:d3:16:38:2a:68:a1:35:28:23:61:
a3:d8:79:80:df:a0:a4:63:ae:a1:56:65:77:9c:c2:2e:9c:57:
35:8b:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:30 2025 by rpki-client