Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File: j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier: 34kaGLdvQP7VfSjZlGr6erPGheLYYEC0QnC/15Ijtds=
Subject key identifier: F2:5F:48:C5:9A:07:C8:D4:47:D5:E5:0C:94:84:DB:55:DE:80:D5:5C
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer: /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial: 0197B6A1A454F9840FFBAEA2848F0BFDC40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number: 0F1B
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: aLWooUv69OFF4Ebm9w0oi8B6BElUrxMCqQOhDlcJFIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a4:54:f9:84:0f:fb:ae:a2:84:8f:0b:fd:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=f25f48c59a07c8d447d5e50c9484db55de80d55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:4c:03:32:8b:56:72:53:91:a9:ad:30:f1:
f8:83:bf:9d:45:5b:32:9a:e3:ae:9a:0c:f3:06:ae:
8e:a6:8a:fd:07:da:e7:c5:47:04:3b:0f:40:25:a0:
e8:95:52:12:44:32:f0:89:e0:08:9c:76:3f:15:ba:
2f:b9:b5:54:90:5c:90:b7:9f:2d:35:b8:55:dc:35:
57:85:56:ff:ad:bd:b3:ff:ec:20:a5:4a:51:ee:3d:
6a:08:e4:87:33:7a:b0:0c:80:37:4f:3d:fa:fc:6b:
76:16:90:e0:33:02:20:7e:6a:01:a6:9e:78:0c:9b:
a5:a9:ec:7a:78:f2:2a:9d:a0:b3:9e:f3:58:94:72:
b1:df:4f:e5:3e:7b:98:3a:1d:32:f3:87:2f:aa:ce:
f5:06:e0:a8:9b:b7:a4:9f:44:0f:9c:10:78:19:59:
84:a5:24:6c:77:c9:bf:46:90:bf:da:c0:b3:e8:25:
f3:d1:ba:6f:70:d4:3f:dd:c5:b8:9d:9b:f2:8b:71:
8a:78:fe:3d:ef:bb:4c:87:b7:3f:05:ad:cb:d0:4c:
6c:fd:eb:22:c5:ef:d6:39:59:64:49:f4:88:0e:4f:
e4:73:22:c0:19:2a:ba:80:95:d2:b8:7e:cc:75:69:
e6:1b:b9:00:c4:17:30:51:a4:8d:6d:59:5d:f3:87:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5F:48:C5:9A:07:C8:D4:47:D5:E5:0C:94:84:DB:55:DE:80:D5:5C
X509v3 Authority Key Identifier:
keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:2e:cf:c5:ba:06:4d:ff:31:7c:8e:08:20:c5:15:28:68:
f6:f9:85:5d:0c:09:2d:a5:93:8d:27:14:2a:99:b9:df:cf:7d:
2e:41:d5:cb:5c:de:02:71:3e:4b:87:1f:34:91:a4:14:84:f5:
fa:a1:78:5c:12:40:05:7c:e9:27:dd:73:fc:eb:e7:88:48:9a:
59:0f:28:1f:c6:91:37:61:48:44:78:b7:9d:48:d8:d6:06:07:
67:1a:f3:d3:37:7d:09:32:af:4f:f5:74:9f:c2:62:3a:94:4f:
ad:46:7c:f9:d1:8e:18:d6:b8:46:4c:ae:88:36:f6:41:19:b6:
6d:bf:67:ca:2e:a8:5d:e5:19:29:be:a0:dd:33:35:3a:16:79:
c0:ff:99:e9:f5:14:bc:72:86:ca:ac:65:d1:4b:cd:af:11:09:
9f:dd:56:8b:41:73:bc:a7:ab:be:ac:53:2d:fc:77:14:9d:ed:
33:8a:a2:44:92:42:0c:3e:7f:c2:6e:06:0b:e9:b2:dd:66:90:
f0:07:91:56:d6:8e:a4:73:16:9f:20:e1:47:19:b1:65:30:87:
bd:5c:c1:d5:f7:dd:30:0a:1f:71:69:fd:79:29:c9:fe:42:cd:
a9:20:07:d8:22:56:3b:fb:8e:d6:41:1a:12:21:00:1e:75:7c:
72:e4:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:44 2025 by rpki-client