Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
File: JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json)
Hash identifier: qv9+tvLGfWgfsZr9dHLwYAjH1kDr7MxgQlqfrfUkTm0=
Subject key identifier: AA:B7:AA:F1:F7:DC:A6:4B:61:5A:4A:69:B8:C6:96:6A:70:0F:40:16
Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
Certificate issuer: /CN=2539dc11c2f222e91044e1be7b281e576deee45b
Certificate serial: 0197B6D7B02376E1EB8EB43A9B593BA52FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
Manifest number: 8B
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: +Y4nrA4hYucaG3Md0VjZx04KMDTbNDazWvo4+TS3rWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b0:23:76:e1:eb:8e:b4:3a:9b:59:3b:a5:2f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=aab7aaf1f7dca64b615a4a69b8c6966a700f4016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:02:53:5e:83:63:98:b4:1a:38:ee:72:25:
bd:c3:6c:d3:d5:b1:11:d0:78:1e:74:d1:33:30:64:
63:e1:09:79:78:03:0d:a5:71:b2:13:db:85:d1:4b:
68:15:77:65:6e:ea:41:65:00:ff:f5:c2:5a:f6:dc:
d0:69:fd:7f:d5:26:bf:14:78:45:f6:5f:4c:db:f7:
30:f6:d6:84:36:b2:f3:00:1f:a7:ae:94:17:9b:58:
71:f6:68:db:4c:61:53:8b:9a:98:6e:65:67:3a:ca:
de:f6:39:c1:7f:77:3e:f8:c2:a1:12:04:2c:ed:9d:
43:f1:89:ea:2c:2b:f0:30:4b:4f:0d:bd:60:9f:a7:
77:62:a3:c5:34:b3:f1:ee:22:49:2e:eb:32:35:92:
c2:35:00:a3:d4:c0:17:67:90:3b:b4:25:86:bf:5f:
9c:94:67:87:4f:73:b8:88:43:93:46:ca:9b:5f:8f:
ea:b3:b0:ef:26:4f:20:70:c5:4d:d2:7a:1a:65:6a:
35:3b:3c:85:88:5d:f1:5c:f3:3c:17:41:b8:7b:4b:
12:36:e2:c4:d0:86:d5:1e:0a:da:74:fd:a5:23:3d:
ed:4f:4c:73:b7:3d:7d:24:33:ed:5f:cb:ba:e7:54:
83:03:4c:6f:b8:0e:77:ed:06:f3:37:f8:2c:05:e1:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:AA:F1:F7:DC:A6:4B:61:5A:4A:69:B8:C6:96:6A:70:0F:40:16
X509v3 Authority Key Identifier:
keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f9:65:41:65:52:63:6c:73:13:50:cb:a1:87:a1:67:33:89:
77:90:af:68:02:af:36:d2:4f:d1:0e:3e:a5:09:69:16:71:90:
50:ba:f3:fd:cf:11:53:ea:04:79:f1:62:02:d0:42:44:c5:e1:
75:bb:dc:08:62:6e:b3:02:54:79:cd:07:01:69:ab:0c:39:0d:
33:b1:14:f2:8c:ac:9d:5b:8a:80:ad:f7:b7:c1:81:c4:69:43:
ee:cb:2b:a8:f8:d4:69:38:23:b0:27:24:10:79:3c:c8:80:46:
9a:b5:bf:8a:c4:e2:10:3b:1d:4c:57:55:04:ee:0d:85:e8:15:
f8:b3:6a:df:83:d9:b7:11:01:d8:be:7e:90:13:98:4f:6d:1d:
b5:55:b2:9a:90:0f:d4:00:27:89:f9:09:cd:71:76:1e:63:8d:
61:85:f2:20:12:ec:54:d6:7d:e1:2b:78:7c:09:83:5d:97:b0:
9e:b7:fa:1a:3a:5d:b4:44:f6:c2:af:4d:98:3e:f0:b6:7d:81:
43:87:1e:32:8d:39:b1:bb:f1:ef:ed:4b:7d:bf:6e:cd:90:ec:
40:7e:49:7c:6d:da:29:79:7a:f9:5b:cc:41:29:91:66:b1:81:
4d:3d:c2:27:4d:e1:a3:1e:f7:f1:52:7a:55:48:2e:7e:c1:b2:
7e:dd:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:42 2025 by rpki-client