Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: S7Hba41s+fLSn8AbenTJEiVQI2Q9tAS5vxVDuf4VHSM=
Subject key identifier: B4:0A:AD:D7:BD:9D:70:E0:5E:17:D6:3F:5D:C6:7F:F2:6A:09:99:B6
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 0197B6A09123B558549E2CC84FD56C225EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 09A6
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: mfJdUOXce+4YmWf3it4ZAJIOk2EbJ63/4Rt9GfWbwoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:91:23:b5:58:54:9e:2c:c8:4f:d5:6c:22:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=b40aadd7bd9d70e05e17d63f5dc67ff26a0999b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:7e:bd:27:d1:fd:36:49:3f:26:38:cc:0d:
4a:6f:b1:92:e7:5b:80:18:70:69:54:96:db:78:61:
3d:31:6f:90:8d:43:ca:09:2e:6d:d8:54:31:31:86:
07:9c:dc:aa:0e:c6:bd:2f:45:6d:8f:28:d6:d8:b1:
87:f6:87:41:ab:d0:27:f1:a7:82:30:c4:ee:af:fd:
19:d6:e8:97:f5:53:45:e0:76:88:72:5c:28:9f:73:
a6:4e:57:8e:4e:5e:d0:cb:26:a0:bf:f3:9d:32:0e:
53:14:f7:6c:4c:c4:27:57:84:fe:4d:a5:d5:19:2e:
0f:5f:7e:5e:df:c5:84:0e:ba:7c:17:9d:3d:11:6c:
b8:19:9a:2a:f1:97:51:ab:9b:30:d1:56:e5:82:8d:
c1:40:e7:de:48:3c:43:cb:14:09:19:1d:49:db:76:
f9:d6:12:d0:00:93:16:7c:4a:78:c7:95:42:76:32:
7f:91:34:cc:c5:4f:27:09:83:0a:1f:c9:b4:8c:dc:
21:b3:03:ae:fe:98:92:2b:53:74:a3:43:02:40:a3:
ee:8b:fd:9a:d5:82:2b:25:3b:2c:0d:8d:3f:c9:2e:
07:8e:d5:8e:c5:50:4e:1d:4f:95:ff:eb:c1:b5:9e:
b4:37:cb:0f:36:13:4e:b1:71:c2:c9:2c:d7:22:63:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:AD:D7:BD:9D:70:E0:5E:17:D6:3F:5D:C6:7F:F2:6A:09:99:B6
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:de:bf:4d:86:24:01:e3:35:6d:28:7a:89:9f:e5:87:0a:
69:c3:2a:85:e5:1f:85:fd:f8:1a:17:2e:1e:e1:cb:0b:35:7b:
f8:34:42:96:e2:a1:58:bd:42:69:22:c3:08:db:61:70:4e:3a:
c6:03:9c:a0:91:74:cc:29:0d:b1:81:1e:cd:56:49:fa:de:02:
d7:31:c7:bd:dc:73:66:1b:da:97:db:d3:6b:a6:b1:da:04:48:
38:81:28:05:0f:ea:ee:45:d4:df:32:8d:c4:e8:b6:0d:49:05:
1d:b6:af:eb:5d:6b:80:3e:9b:b1:d5:a3:d7:30:aa:a1:f1:dc:
7b:1a:41:98:7c:22:35:08:b8:ad:07:07:ef:e1:4e:aa:c5:f0:
27:da:e9:5d:ea:19:5e:c9:d0:b2:63:06:5b:36:63:46:38:f4:
2d:35:0e:df:fb:92:07:02:78:3e:56:3c:9f:33:71:65:3a:e2:
1c:64:47:45:f8:d4:4a:17:80:71:09:ba:f5:04:38:14:5e:b6:
7a:fe:f5:47:16:e2:a8:5b:10:92:7e:02:57:29:52:e8:91:5f:
cf:5b:ff:df:3a:d0:f3:28:d7:a1:76:6f:50:b0:95:cf:fa:59:
f3:36:63:d8:69:e5:c2:5c:57:fb:91:1e:62:f4:f0:4e:ab:df:
c0:bf:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:21 2025 by rpki-client