Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: IY8pG2wAAAXG/EIMRMp0x7KPW/RFhxDvO1oCMyPDiqY=
Subject key identifier: B7:68:54:41:27:22:74:80:22:98:71:B9:58:B8:F4:13:88:12:BC:2D
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 0197B745059E9BF78608BEA9718DB1B143F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: vA8kHZrCVwv/Q7G9GZDyWo1ZfAWdtBWeagSwJo/pCNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:05:9e:9b:f7:86:08:be:a9:71:8d:b1:b1:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=b768544127227480229871b958b8f4138812bc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:88:44:ce:80:22:2f:27:87:a8:83:4b:36:
26:c3:1b:f0:d5:2c:38:87:c5:88:82:69:c0:50:0c:
d5:a9:1b:18:e7:78:97:da:69:78:1b:11:69:3b:1a:
94:78:e6:6f:28:4b:15:aa:10:80:9b:e6:65:ef:79:
43:aa:db:8e:b6:ab:fa:91:24:2f:c9:6d:75:b7:fb:
cf:e3:07:45:30:db:65:32:29:5a:f1:12:23:35:70:
cb:9b:a6:a1:c7:72:05:72:63:6b:1e:e6:69:de:c6:
86:92:76:b5:52:f5:a5:ec:8f:bf:52:65:84:57:fd:
0f:d7:4f:9d:a3:52:cb:81:19:e9:04:8b:9b:5b:0b:
65:e1:70:51:fd:e3:2b:de:ae:c0:d9:11:00:bd:1f:
5f:c2:47:9e:b7:9a:de:84:9a:f3:aa:b2:3c:fa:04:
8e:fa:09:a3:8f:d3:78:b2:c2:ff:e8:d4:85:72:58:
c8:3f:ea:16:6f:2c:7e:94:90:39:a9:db:c0:41:bf:
c8:2e:f8:2e:5e:1f:2e:19:b6:05:9b:05:7d:32:43:
e6:11:87:bf:a1:56:19:94:e7:6d:0e:30:78:e9:d0:
f4:34:ee:a0:8e:7f:90:47:47:a6:40:5b:b4:44:ca:
9b:90:ec:7f:56:83:7e:a1:b0:03:63:2c:ef:8f:8e:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:54:41:27:22:74:80:22:98:71:B9:58:B8:F4:13:88:12:BC:2D
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:6e:35:05:3e:84:95:ef:e0:2f:b3:5a:28:9c:3a:50:e7:
18:ef:54:ce:e8:83:09:71:2c:62:f2:52:a0:84:5f:55:96:26:
3d:6a:a9:fb:23:57:3e:31:97:56:18:1e:9c:22:62:e5:80:78:
20:c2:d6:71:46:3b:de:13:bf:4e:9e:0f:75:9d:a2:17:c3:1c:
f7:fe:7a:d3:36:99:08:11:c3:7e:2e:4d:9c:b1:83:62:7f:c7:
7a:2b:35:c2:41:66:a1:52:d8:4b:a0:aa:7c:67:14:18:f9:5b:
7b:92:4c:4b:df:f2:a1:0a:b2:1f:73:f6:e8:df:d9:6b:08:94:
e8:a8:f1:2e:cd:db:55:84:20:28:ac:2d:64:f0:4f:68:7b:29:
61:4d:69:54:76:6e:80:8b:40:11:22:c3:1a:bc:73:8e:43:18:
e9:e7:53:a7:f0:e0:ea:c5:f8:7a:45:05:4c:9d:b0:7c:4a:a3:
b7:83:c3:b4:f7:57:33:34:d4:98:73:9f:3a:e6:00:1c:f0:d0:
4b:9b:1e:7a:09:45:6f:34:c2:85:f9:ec:ab:c9:f2:1f:18:53:
db:f1:3a:10:3f:ba:d9:e2:e2:e6:d1:8b:c1:10:d0:2c:1a:2b:
0b:df:98:28:fa:73:62:15:a4:b3:dc:ef:3e:5f:69:d5:59:4f:
8e:0c:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:51 2025 by rpki-client