Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: UMTyC1XM83+u7xoWkGc61g+NyBgWcfrXEvUak6CMrLI=
Subject key identifier: 4D:11:AF:7D:BD:76:FB:74:CD:F3:71:4C:08:23:6C:08:4E:30:BF:1C
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 0197B6327D38E4AE39B3EB667EFA636DDB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 0113
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: qIpNRlKNjnLBk7zG1rMipbLhcW44kSzNzAW5CsKH5Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7d:38:e4:ae:39:b3:eb:66:7e:fa:63:6d:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=4d11af7dbd76fb74cdf3714c08236c084e30bf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:63:25:8c:dc:0b:1b:4a:3a:4c:ac:25:2f:
d9:21:48:59:2d:9f:a9:6f:16:86:98:d1:c6:bd:7c:
63:e2:5d:7e:d2:7a:6e:8e:db:9c:6e:3c:53:ac:cf:
2f:73:36:9f:55:a1:f1:19:ca:32:bb:8c:98:8f:c2:
c7:02:8f:21:56:fd:5e:64:c7:7b:11:ce:1e:1d:b7:
60:06:dd:36:7f:ee:07:67:b9:d8:c3:4a:22:bd:12:
7e:a9:81:14:d9:5c:d5:21:ae:63:4e:8f:fd:1d:47:
62:50:fc:7e:cf:28:4f:5c:33:0b:18:d7:48:72:3f:
8f:8c:35:15:6f:96:7a:33:b3:10:2d:17:8a:25:3d:
6b:d1:9c:07:03:9e:bb:2c:c0:54:fc:cb:51:df:58:
6a:11:98:91:51:59:cf:43:68:8a:bb:cb:04:6e:11:
7f:e1:47:da:1b:a4:48:16:54:30:2a:d9:ba:f0:f4:
bc:d5:d1:3d:46:31:af:61:39:a3:e7:6c:81:1f:35:
64:46:c8:10:e6:42:61:22:34:fa:f4:dd:bf:f2:9a:
5f:84:70:d5:18:f1:21:78:ac:c6:03:02:fb:f1:26:
2d:e8:2c:b6:48:0f:da:59:63:a8:01:84:61:75:c8:
c4:15:35:af:5d:be:33:ad:bf:bc:73:82:e5:e8:85:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:AF:7D:BD:76:FB:74:CD:F3:71:4C:08:23:6C:08:4E:30:BF:1C
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:84:76:55:82:ec:20:5c:76:49:40:bb:9e:69:c9:5c:42:00:
a1:68:d9:63:1b:1d:ff:49:e7:f4:78:6e:e2:25:dc:66:5e:cb:
9a:5e:fa:e0:0f:5f:5e:6c:a3:03:74:5c:c6:7c:ea:ce:46:96:
7f:86:bb:17:5b:6b:11:c8:5c:41:58:38:f7:19:e9:b5:bd:6f:
db:63:ca:7e:b5:30:bf:7b:c3:98:70:38:be:65:a3:4c:db:61:
9f:90:b6:42:3f:3c:de:11:1d:51:bf:57:a6:5c:27:86:4b:92:
22:b3:56:b4:77:02:2c:c6:a5:51:63:07:69:0e:f5:5d:72:6b:
9f:c6:89:ee:07:22:d6:77:19:00:ab:17:6f:41:4b:22:76:90:
7e:71:72:2b:89:63:93:42:b5:b3:e7:90:92:2a:1c:cf:13:cc:
f1:41:bf:ce:65:fd:e8:09:4d:82:cd:ca:65:a9:87:4b:b3:63:
dd:84:56:52:71:49:db:24:85:91:a6:a2:17:91:db:3f:a7:e4:
77:87:99:be:75:b7:db:c7:e9:57:51:39:77:1a:3d:1e:e7:4a:
f3:7f:d0:91:43:c1:4a:7d:72:50:c5:de:6c:96:cc:69:71:c6:
80:c8:ad:05:32:f7:a3:2b:70:7e:41:d6:71:0b:55:50:a0:c0:
8b:0c:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:09 2025 by rpki-client