Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: YkMVGVqakAHer32b82Y6TYsIwNITJMGjE6g/X6tUh7o=
Subject key identifier: 3F:1E:15:D5:37:9F:E6:12:DD:D3:F7:C8:A1:D2:9D:51:8E:DA:6F:8B
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 0197B6A113764677DAFC0BE4C23578D570B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 08FB
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: xa5E5ic60ZlykEnpNJbMlftcmI24FFGThjezl0vel+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:13:76:46:77:da:fc:0b:e4:c2:35:78:d5:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=3f1e15d5379fe612ddd3f7c8a1d29d518eda6f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:5b:ad:07:45:cc:78:56:fa:2b:c2:ab:5b:
9a:12:d5:20:e4:e5:cc:cf:d1:ac:cb:bb:d9:e0:7d:
20:7b:d3:9b:09:2f:a6:01:40:85:9e:35:97:fe:c9:
3f:04:4f:83:5b:e7:67:2f:7e:73:a1:bc:d9:19:b3:
87:fd:c5:49:f4:26:8c:08:e7:e9:de:b7:93:a9:1e:
dd:bf:16:92:7d:19:82:f2:79:57:27:5f:91:d2:9e:
6c:d0:45:bc:ab:cc:88:3a:6d:a8:c1:6a:0a:d6:7c:
5e:24:28:15:b1:c1:02:cf:fe:53:16:d4:8b:e1:68:
f6:0d:b1:67:1f:cd:94:d4:7d:cf:e9:ab:f5:1b:e6:
32:c7:07:9b:de:3e:a3:70:1b:83:84:98:6a:a9:4a:
0f:7e:b9:51:f2:3f:e4:58:1a:66:33:43:d9:ee:d8:
cf:71:05:df:ba:71:e6:13:97:2e:f8:62:a4:1c:ac:
0a:1f:5b:46:a9:d9:c8:17:e2:3e:38:55:e6:72:5a:
b0:1b:6c:b7:30:a4:a7:7a:18:37:13:83:d6:e9:a1:
c1:1f:e7:11:bb:67:1f:aa:27:dc:64:ec:2b:f1:89:
31:6f:e8:de:06:66:99:ec:78:ed:d3:91:3d:c6:9b:
e8:2b:b6:3d:c7:33:9c:74:59:e0:ed:64:47:fc:66:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:15:D5:37:9F:E6:12:DD:D3:F7:C8:A1:D2:9D:51:8E:DA:6F:8B
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a2:d3:7f:78:0b:46:af:19:4c:f7:c3:c4:97:69:0e:f4:e8:
6a:8a:43:13:e3:41:ef:15:56:46:bf:20:9e:e6:f3:2c:9a:38:
48:f6:45:04:8e:6d:1b:bc:bf:e8:38:14:6f:32:8e:aa:c1:c3:
3c:17:c2:a5:20:a9:6c:9e:9e:b3:28:6e:1b:2c:8f:35:4f:fb:
e0:d9:d9:63:9e:87:d0:9b:fe:44:14:c7:bb:6c:cf:89:2f:3f:
29:47:7c:e3:ab:0e:ee:9d:00:a7:d6:28:98:2f:0a:2f:23:51:
57:98:ef:3b:c8:ec:43:2e:69:a0:a6:80:cc:ca:75:86:90:7e:
70:e4:bf:86:06:8b:8e:5f:c2:40:35:79:16:d0:a1:54:d9:10:
2b:5a:95:88:76:64:66:be:6f:8c:c5:b4:17:2f:41:66:ba:57:
d9:05:78:49:63:50:bb:57:5f:85:11:2b:26:dd:f2:0a:45:3d:
de:4c:c4:73:c0:1c:e8:5b:28:cd:25:f2:26:a9:9d:99:15:9b:
0a:e7:8b:af:dc:d7:43:25:6f:1a:2c:47:44:1b:63:4e:64:1b:
98:b8:87:1b:16:42:61:cc:88:04:41:25:a2:80:5a:47:f6:30:
7c:4c:2c:49:b5:5d:7f:ef:60:c6:18:6a:b1:54:35:05:f3:61:
41:76:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:23 2025 by rpki-client