Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: JJX9mAfVx2DE37j4gVLCMkZMqLhap7DTNFUIFsL/DhA=
Subject key identifier: E3:53:CC:5A:C1:36:85:7B:F9:FF:73:F8:96:A9:0C:67:BB:FA:AB:FD
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 0197B7B35AF9E99FEEFF45CF264C9921FDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 0517
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: rtdyBCotET+AftuBa/XEghp2NQ1KtQ039sLWnx/oTVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5a:f9:e9:9f:ee:ff:45:cf:26:4c:99:21:fd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=e353cc5ac136857bf9ff73f896a90c67bbfaabfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:66:a7:2c:a6:97:b5:6e:b9:cc:57:31:e1:
54:9d:9e:fc:bb:a4:b3:5b:ec:58:ad:b5:c4:44:04:
b0:bc:df:5a:b4:e9:f1:cc:70:0b:93:3a:81:4a:c8:
a9:64:30:b2:ea:7f:ff:51:0f:7f:a3:a5:58:77:96:
d9:90:91:84:ee:83:de:09:46:1e:7d:0f:86:fb:ba:
10:f4:22:08:70:82:02:20:77:f7:5f:cc:85:e5:fc:
b9:d6:e9:16:5b:45:27:23:4b:0c:0e:14:2e:11:7a:
3b:72:9b:a0:31:cd:5c:f3:2e:2f:1b:4b:39:4a:b5:
bc:95:46:de:79:72:c1:9f:ce:81:ed:4a:71:7f:4b:
39:92:5c:ed:cf:16:9f:f8:43:86:c8:06:fb:4c:9e:
18:6e:67:98:1a:06:ec:f6:6c:f4:4c:e4:fc:08:7b:
26:bb:39:dc:45:4e:28:84:d6:3f:92:dc:7c:ba:dc:
ee:75:34:46:a6:81:a7:b1:4e:3c:86:10:13:e4:b6:
1b:88:8b:b2:ea:2a:54:3d:38:c8:58:e3:b6:d3:67:
cc:83:2d:a6:7a:d0:3e:70:38:40:af:90:32:1b:ac:
9c:d4:50:ab:3c:0c:89:38:42:ec:24:02:b5:78:c0:
ba:83:12:4d:77:be:ea:f9:f9:24:c4:e9:e3:29:53:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:53:CC:5A:C1:36:85:7B:F9:FF:73:F8:96:A9:0C:67:BB:FA:AB:FD
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4b:31:b3:e5:b2:8c:4d:5e:c3:0f:70:14:41:9d:cf:3f:ac:
54:92:c4:a0:a6:2b:4c:c0:24:6e:c7:71:8d:14:d3:fb:14:47:
9e:ea:e1:6a:95:d6:86:28:9e:c1:96:7b:4c:31:33:d5:b3:d4:
e5:ac:75:03:17:f2:ad:bf:df:98:2d:13:56:32:8c:47:fc:f5:
b4:58:82:ed:65:d5:ea:63:44:33:a5:a4:76:b8:4c:db:d6:bd:
21:cf:a1:d3:a5:f7:4e:09:6c:d6:83:27:c2:32:57:3f:04:89:
97:c8:0f:31:55:c2:6e:92:59:de:29:ea:aa:d8:e8:b9:87:18:
86:18:f8:ae:70:0b:84:e1:c3:bb:95:3b:e6:92:d7:9f:c4:27:
46:34:89:e3:fc:43:cc:da:c5:b6:a9:81:6e:4f:c3:f2:21:fd:
98:89:fe:b5:f8:29:4c:dd:f2:cc:37:e4:bb:4a:c6:29:a7:5f:
da:26:81:f5:b5:26:da:d1:c4:72:7f:62:6e:a9:1e:72:72:de:
38:cc:f0:0d:01:4d:d9:26:16:10:d5:48:65:f5:61:f1:14:31:
1b:54:42:37:8e:1c:d7:9f:47:16:3e:37:be:57:96:2e:fd:c5:
2c:4f:00:68:f7:d6:1b:d6:f3:25:de:86:20:83:fb:ad:53:6c:
03:25:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:18 2025 by rpki-client