Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: qoLNjVwjX0/WVQcHUyEZ1gaDcZnxG712/xaRelivjoI=
Subject key identifier: 89:4A:D5:CD:97:C9:1A:9B:0D:A0:2B:F9:09:13:BE:10:DC:64:76:E7
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 0197C237BC7D7491B4589BC924E6210AA30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 0341
Signing time: Mon 30 Jun 2025 19:02:01 +0000
Manifest this update: Mon 30 Jun 2025 19:02:01 +0000
Manifest next update: Tue 01 Jul 2025 19:02:01 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: vFCbVwJ+R4hYXDH0XJiplTpnqRgnL15s+XDAD4qeKJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:bc:7d:74:91:b4:58:9b:c9:24:e6:21:0a:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Jun 30 19:02:01 2025 GMT
Not After : Jul 1 19:02:01 2025 GMT
Subject: CN=894ad5cd97c91a9b0da02bf90913be10dc6476e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:eb:dc:26:e5:20:30:c4:cb:9d:a2:19:ee:
aa:da:b1:e4:09:2b:7b:80:7a:4a:93:1c:91:21:18:
f2:2a:53:e0:0d:b5:99:3f:e8:70:75:d3:d5:cf:8f:
3d:a8:22:c6:fd:12:04:d7:29:a9:ef:fa:07:1d:c9:
a5:4a:f6:7a:bb:75:e4:36:db:79:2d:e6:52:78:13:
ce:3f:5f:22:1c:02:4d:68:07:6e:3e:3e:ad:b3:96:
01:58:4e:0b:d9:48:91:e4:79:90:bb:98:e3:51:32:
52:86:c4:a3:99:ae:c0:49:27:31:b2:b4:8c:7e:f7:
21:d5:47:2d:85:79:fe:f0:3b:4b:b8:68:a6:22:40:
81:9e:d7:36:b3:92:ac:d9:a6:c7:60:30:e5:1a:3c:
bd:bf:71:83:11:d9:b7:b6:f6:79:a1:1e:2f:da:e4:
0e:8b:82:7c:42:f4:00:35:12:43:ed:06:50:29:74:
89:44:57:9a:6f:5f:8e:a0:3e:51:25:3f:82:3d:2f:
5e:08:9a:99:1c:73:9f:b3:8b:1a:c2:1f:8e:f7:2e:
1e:4d:98:de:bb:62:00:e5:aa:8a:4b:85:41:d5:9f:
06:33:51:6f:2c:f4:73:c0:98:b3:87:13:22:7e:e2:
f8:96:f1:99:db:28:2c:2f:22:3d:ab:2e:83:de:5e:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:D5:CD:97:C9:1A:9B:0D:A0:2B:F9:09:13:BE:10:DC:64:76:E7
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ef:f9:5d:4e:d9:a3:84:0d:f8:5a:73:bc:e8:71:12:9b:d9:
ad:a0:44:ad:b6:fa:a9:c1:fc:42:f7:67:c3:1e:21:de:e5:b5:
5f:4c:95:f8:2b:ae:9b:86:52:60:a0:f6:20:35:58:ad:5b:a4:
26:32:c4:aa:c7:cc:5f:5f:2a:a6:cb:56:30:f2:f2:42:35:2d:
69:20:21:7c:2e:ea:3d:9d:e4:ab:62:6f:07:9c:94:a9:22:ea:
69:d7:65:60:c9:86:c3:68:72:23:a0:51:6f:35:3c:4a:93:a6:
ab:3a:bf:29:cb:9c:03:6c:54:70:44:b7:4e:4c:a2:d5:93:e0:
cf:3a:d7:e0:43:3e:9f:2c:95:6e:7f:1c:ae:d7:31:9f:50:45:
86:7d:2d:73:d0:80:95:05:4a:ee:da:99:6a:96:6d:aa:67:d3:
cb:28:20:14:42:ab:a2:90:95:60:63:98:54:25:e2:e0:9b:e9:
c5:74:12:c1:3f:0b:c0:50:59:df:93:7c:90:b1:8e:b5:9e:de:
15:41:b8:10:5b:f8:57:34:7b:ff:90:e9:57:7e:6c:c2:ff:f0:
2a:74:61:51:3b:70:d8:bb:75:56:c9:13:52:13:33:96:43:ca:
62:34:db:87:8f:d5:75:6d:ac:df:cb:d9:da:1d:f7:2d:e3:2a:
8c:66:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:09:39 2025 by rpki-client