Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: 48Nlcf/AyQvVRNo5c0ZTSLks7Fm62XcYHbN26ZMZfFA=
Subject key identifier: AC:C7:7B:7D:8D:26:A1:66:96:F0:B7:2F:33:13:87:AB:34:9C:DF:75
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 0197B6A1B8C5F41D58418B8A6CF43F7859EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 0F41
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: gmFZcV2HPNX/yK5t8uPK1HE3FkyckaAkcY4Nu8a+XQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b8:c5:f4:1d:58:41:8b:8a:6c:f4:3f:78:59:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=acc77b7d8d26a16696f0b72f331387ab349cdf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:77:bd:67:08:33:c8:09:16:7a:57:26:10:
b8:b1:ea:11:2c:f0:64:cf:d8:b4:7c:ed:0b:7a:34:
aa:b4:3f:42:44:17:ae:96:96:2f:83:40:6c:2c:3a:
97:10:5f:2c:36:ca:16:f6:72:41:90:1f:6a:5e:19:
8e:4f:e1:0a:5d:67:e1:60:4e:e4:d6:80:5c:da:0a:
6b:fe:f0:b5:ac:45:cd:74:6e:70:0e:5d:76:24:3f:
e3:ae:64:96:2f:01:e9:73:ad:9d:b2:97:4c:16:fc:
b1:dd:a5:ab:38:dd:9f:8f:d1:a0:b1:c1:29:5b:58:
27:4d:9f:b0:63:93:11:44:54:92:89:59:21:0a:be:
5d:98:3b:04:51:f9:a1:76:d9:c4:09:a2:44:56:16:
14:0d:4c:08:33:24:7a:d6:44:bd:b9:be:01:eb:b5:
65:00:a9:0b:6f:bd:86:b6:78:1b:15:fe:34:94:c4:
b7:ff:ac:e4:d5:59:38:a4:bf:bd:09:26:e9:63:02:
57:1b:1e:c1:0b:78:e5:9a:d7:e1:5d:65:1d:c5:73:
8d:dd:cc:cc:c0:91:55:91:b3:63:29:a7:06:ab:93:
67:97:be:2f:29:d6:03:5b:5d:17:2e:06:3a:57:c1:
6b:05:d5:b5:74:f0:3e:bd:81:4b:2b:5d:0b:2e:24:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:7B:7D:8D:26:A1:66:96:F0:B7:2F:33:13:87:AB:34:9C:DF:75
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1b:62:a1:da:5e:6c:47:9f:c9:77:28:22:0a:d5:c1:0c:1d:
24:f1:ea:0f:bd:52:19:49:85:96:8e:7b:0b:a8:db:db:b4:27:
2c:ca:18:c0:5b:b3:01:72:01:c3:a5:22:9f:a4:e5:35:f4:05:
ff:58:82:4e:06:5a:55:0e:38:31:c8:ef:91:fd:1d:e0:87:c9:
04:e3:9d:97:26:c0:f1:13:c8:34:11:28:64:23:77:ff:ad:62:
0e:10:a2:38:f5:3d:c0:7c:6f:2e:bb:ac:ab:d0:bf:28:b2:d9:
3e:3d:ca:8e:6c:e8:90:75:62:e0:d3:ab:56:d8:2b:1a:91:a7:
5e:f6:d4:d5:d4:e5:e7:ca:30:e4:f6:90:2f:c9:95:e1:d1:ce:
73:33:02:08:43:72:d7:55:ae:37:53:17:52:ca:03:fd:8c:5c:
3e:29:18:1e:22:c3:1f:0a:79:80:d5:71:d9:e2:02:84:f1:d9:
02:2a:d3:5d:28:b7:05:83:3e:cf:3b:97:58:64:b7:71:eb:b9:
21:76:80:bd:3b:c4:47:1e:c5:cc:e7:c2:17:43:3a:6b:0c:e3:
07:0e:39:55:2b:d1:1b:ed:cd:24:ec:a8:37:af:a1:96:99:dd:
3e:41:7f:1d:f2:e7:06:c6:8f:a1:f3:7e:76:47:ae:4a:70:c3:
97:c1:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:53 2025 by rpki-client