Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier: Dfu8wjtfCxxSa2fyz0oEi8VFsxk0YYTGEgqZ0dceX1w=
Subject key identifier: F1:33:79:12:27:07:D3:10:41:26:E5:42:EF:2D:AE:A1:8E:E8:62:D1
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer: /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial: 0197B7EAD7515DCB32209D5EB44BECE87C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number: 0DD0
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: NCKNFgjtIH2xsI3eJCXzyHZ+OKIN9JWzxJbi2hZekOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d7:51:5d:cb:32:20:9d:5e:b4:4b:ec:e8:7c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=f13379122707d3104126e542ef2daea18ee862d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:d2:90:3d:fa:53:a7:76:62:71:8b:5b:a3:
d5:2a:90:58:49:9b:4f:7b:7f:89:9c:5a:75:b6:db:
f3:62:a9:4d:6f:92:b2:53:6d:21:17:8d:11:23:1b:
b8:40:90:8f:35:d4:87:76:7c:6b:18:b0:a8:66:75:
09:71:76:27:63:21:ce:20:7b:db:4d:0d:64:fe:cb:
ef:d7:37:4a:56:7f:c1:bc:b2:bc:0e:3d:67:d4:e7:
65:4e:d4:b5:75:30:6d:5f:fc:7a:5b:1a:51:92:45:
54:b8:37:ea:b3:d2:9d:75:26:9d:3d:4a:e7:65:78:
29:85:0f:e7:e1:f3:63:f4:70:9f:82:6c:82:85:b2:
a7:e6:30:6e:85:1c:5b:4f:b8:23:fd:a1:be:0d:cd:
2a:1a:3c:72:1d:74:ac:35:c6:ae:83:8e:09:3c:b1:
b5:a7:1a:31:d2:c8:ea:a2:e3:74:04:a4:43:b3:b2:
e4:a6:68:34:56:e1:75:41:91:fd:9f:d0:19:17:4a:
2c:4c:fa:db:af:48:ab:b0:20:94:2d:6f:a3:5e:42:
92:0a:a4:79:c9:06:39:ea:06:78:30:58:02:d6:1d:
45:3e:1d:29:8b:2e:aa:82:67:37:bc:5e:90:1a:13:
be:80:d4:26:66:bb:65:51:35:82:52:8a:97:b5:f1:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:79:12:27:07:D3:10:41:26:E5:42:EF:2D:AE:A1:8E:E8:62:D1
X509v3 Authority Key Identifier:
keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:65:a0:4c:78:a4:29:d1:d6:cc:bb:52:07:c1:5c:be:c2:
ad:e7:ad:e7:81:6c:ca:0e:90:e2:8b:50:35:ef:21:89:42:b4:
a2:35:e2:f2:9b:82:b7:ca:09:c9:a1:84:95:3d:55:39:66:dc:
56:39:62:fc:03:9d:d0:a1:21:eb:13:69:94:c2:9a:42:9a:2f:
9a:26:a8:89:cd:b1:6d:25:43:73:c7:51:e7:f2:41:37:21:ef:
25:3d:05:01:19:30:a9:63:99:de:27:b5:ab:a6:be:15:a1:57:
5f:78:04:c5:d4:29:94:2c:1d:8b:8e:2f:87:ef:f1:f3:c1:7a:
5b:75:f9:34:4b:3c:b9:ee:60:eb:18:81:a6:06:8c:24:e7:94:
99:d5:20:fa:e3:7f:b8:e9:58:ac:66:e0:dd:ac:65:c2:de:78:
32:83:5d:d6:df:53:35:3c:73:a1:51:51:1c:2b:59:91:fc:d8:
12:8e:5d:ab:f8:28:a8:c1:f6:bb:83:dc:ad:2a:03:a2:0d:82:
cb:81:dc:80:1e:4f:ae:c8:4d:73:78:de:8a:62:85:11:4b:72:
21:2c:20:90:ac:a4:58:b3:b5:00:57:f8:34:49:d4:fd:d7:b9:
22:fe:af:ab:e1:d7:8d:ae:17:29:5e:b6:84:c8:01:b0:36:fa:
63:cf:f0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:06 2025 by rpki-client