Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: tR8bUZJul9ligwLihfSXhu1l+KqWmuS93Et3OMwUP+o=
Subject key identifier: 17:A4:01:1E:E6:A8:D3:28:4E:05:D9:26:C9:20:A2:CF:DB:A7:51:E9
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 0197B6A049FA3E23F76C0D7E91677191D9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 06CE
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: y+vCNyo1dGSAzDASuoyU4ZF9xUGyyBi8wnzwBo+2jqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:49:fa:3e:23:f7:6c:0d:7e:91:67:71:91:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=17a4011ee6a8d3284e05d926c920a2cfdba751e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:10:5a:0f:a6:46:75:83:af:57:a8:99:de:
58:0c:8d:24:e9:a3:d5:ec:65:e7:3b:e5:45:a6:3d:
4c:4a:95:df:b7:0f:98:47:6f:68:7e:11:e2:00:71:
96:3c:d8:d2:5c:66:21:a4:6d:fe:f6:90:9d:7a:ca:
62:38:57:50:1b:4c:fb:ff:56:00:14:ce:27:7e:01:
81:4c:72:ef:af:ec:bf:81:b5:59:61:37:8c:f4:51:
a7:37:d0:d3:2b:34:9d:c8:4d:c1:49:74:27:7b:d2:
84:63:9d:1a:cc:da:f8:13:e6:a6:ea:a8:e6:5f:46:
11:6c:e3:2f:a0:7a:30:58:ce:00:98:ba:bb:96:dc:
73:be:61:a3:08:aa:8d:e4:fe:cc:5c:5c:be:45:0b:
41:6d:3b:ce:82:48:64:eb:47:0d:ef:00:ac:c4:7f:
4e:2c:10:55:45:ea:85:6c:12:16:66:c0:af:97:de:
52:c7:0a:04:77:37:8e:2f:4e:2b:55:d0:4b:24:80:
2f:b1:c2:97:de:2b:ba:55:21:e3:82:33:10:f7:9f:
81:71:6f:05:7a:89:7d:1a:43:28:50:94:dc:89:eb:
10:e3:cf:94:e8:d0:8d:3d:28:f0:39:34:c3:d7:e8:
fa:a9:1a:dc:b1:03:01:40:c0:96:25:53:c7:d3:8b:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:01:1E:E6:A8:D3:28:4E:05:D9:26:C9:20:A2:CF:DB:A7:51:E9
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:54:89:40:9f:56:f4:98:d0:80:53:e2:2b:27:d1:bd:98:41:
13:12:20:ca:0d:ca:07:39:17:c6:f8:4c:09:ea:c2:54:e6:96:
4e:1f:64:d3:5c:2e:0e:d1:0a:a8:d1:a7:03:88:89:e0:e0:92:
cb:4a:da:31:ec:c7:0d:a0:bb:ba:c3:f2:3a:f4:d1:66:3c:3b:
49:35:15:46:0a:94:ec:81:88:9f:f9:66:0b:be:d0:2b:92:4c:
d6:9d:77:96:fd:c7:80:05:04:8c:00:5c:fd:55:16:9f:36:d8:
41:ef:25:88:75:07:54:6f:f1:0e:6e:22:8e:8e:68:c1:57:a4:
9b:55:54:b6:68:37:01:a3:47:26:40:f2:80:a6:9d:c5:08:d0:
1b:26:8f:2c:21:75:de:83:99:1e:24:2d:af:b3:44:e3:a0:0d:
00:fc:68:7e:ba:7b:0c:ff:ef:24:62:a6:ae:fb:69:b6:8f:ef:
99:c3:24:19:31:ec:83:14:45:7f:d7:75:f4:02:cf:75:da:e7:
79:e9:7f:93:cf:9c:45:5d:23:e5:d4:aa:11:ee:75:2f:db:5b:
94:d8:6a:3f:45:6f:33:3a:67:6f:8b:9e:9f:7f:52:a9:ac:c5:
36:cb:5e:30:e9:a8:8a:4f:aa:ca:15:9c:7b:1b:ac:1d:ab:61:
35:42:a8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:55 2025 by rpki-client