Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: NLAH3AMD+QJlev+DIPVx3izbqJbeJylTiyFWjRl0gOU=
Subject key identifier: E4:1C:52:BD:1F:0F:2F:CF:BF:67:5B:38:51:72:E8:D8:C0:5D:F7:DE
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 0197B70F382BCB8C7AE3CB18CA20ADE2D59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0A65
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: Q9UzVnix2s2DCXXI+nbhTyDvP342aVt2IF+Mg0bBNqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:38:2b:cb:8c:7a:e3:cb:18:ca:20:ad:e2:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=e41c52bd1f0f2fcfbf675b385172e8d8c05df7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:f0:55:83:06:c4:73:00:f4:86:06:ce:78:
d7:ae:fe:70:f8:70:71:0c:f8:0a:65:ca:75:26:9b:
c9:ee:21:36:fd:e3:d5:d0:27:08:2a:d9:72:e1:0d:
53:9e:27:f2:5e:69:51:71:df:52:85:81:d0:33:5a:
34:0e:a5:7d:c7:e5:eb:51:3f:ab:d0:49:a8:e4:ce:
78:ed:5b:d1:09:f9:78:23:ea:ba:f8:f9:59:ec:fa:
b4:3d:78:39:93:1b:bb:0f:05:97:d5:17:f2:e7:6d:
3c:9b:72:e0:a6:f8:c6:80:a7:7f:56:4b:18:bd:95:
09:cf:99:8c:ba:68:75:1b:f6:72:7f:f1:54:2e:6f:
e4:49:27:0d:13:79:bc:00:5f:40:a7:4b:f2:28:fd:
d9:f4:0c:9d:b2:f8:5a:0a:71:3c:de:f6:35:85:e7:
27:53:8a:34:b2:02:06:3b:91:fd:cb:75:d9:4a:b2:
ea:77:f6:e2:34:50:9b:4c:c0:a2:b5:fc:6b:36:36:
9a:76:6c:7d:d1:92:28:f6:45:b1:be:aa:88:87:7d:
50:c5:af:52:f3:10:df:7b:20:08:2e:a0:9f:8d:7a:
ad:36:8f:a2:e0:ec:2e:25:79:e5:db:2d:84:b4:a9:
fd:c7:0d:57:2e:e7:86:41:63:84:10:ca:33:14:f8:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1C:52:BD:1F:0F:2F:CF:BF:67:5B:38:51:72:E8:D8:C0:5D:F7:DE
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:80:21:6d:4e:f1:2b:e3:49:7b:f6:90:ec:d4:02:99:27:88:
c0:4a:c4:ca:06:81:a2:82:af:61:a5:54:a7:c4:b4:2d:bd:a4:
8d:b1:86:d9:29:0f:4e:c3:f3:3c:5e:bd:dd:f6:62:51:af:03:
08:d2:51:17:cc:9d:24:ee:2a:5e:a2:c5:f9:58:39:05:80:23:
12:68:dd:e6:7c:f5:73:e7:d7:bc:0c:b6:ea:22:d4:2a:fa:e0:
ee:09:5b:8d:ed:dc:bc:44:72:c0:89:12:30:4e:01:eb:96:30:
75:07:ed:e5:5a:7d:7b:b9:fb:be:22:0d:fb:fd:b8:3d:d8:0b:
61:66:49:1d:af:c3:c3:4f:99:9e:12:61:36:32:1a:80:3e:0d:
84:00:26:39:b6:53:ec:f2:3a:e6:03:c4:0f:b2:0d:1f:0e:fd:
fd:ca:a1:8c:78:56:a2:32:5f:e1:d4:79:a7:25:c4:62:46:7e:
4b:e8:70:c3:f5:6f:12:21:da:a7:40:78:0f:af:61:66:f5:c8:
da:e7:10:8f:13:e2:3c:e0:f9:b3:44:79:9f:f9:30:79:72:23:
c4:21:84:c6:33:90:52:2c:e4:f4:ad:5e:be:df:66:f4:79:56:
76:f4:94:64:65:35:e3:ef:23:ab:6c:aa:e0:6e:ad:6f:0a:83:
91:14:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:20 2025 by rpki-client