Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier: cQM7kTNyDnAioreyySosc/w3zwXmRckywwR1W1rXJXI=
Subject key identifier: 15:4D:85:08:00:07:4F:18:E0:9F:50:21:9B:6E:AD:B7:4D:2C:39:2A
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer: /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial: 0197B74519A83AC66BB464A638A383A0CC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number: 0417
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: 3f24uQoEHw+nkn3rAIt4xb1Vhe8487HxW0BicfwAvHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:19:a8:3a:c6:6b:b4:64:a6:38:a3:83:a0:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=154d850800074f18e09f50219b6eadb74d2c392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:31:1c:ad:d9:f6:9a:26:e9:3c:c4:cc:bb:
9c:d0:29:de:ca:d3:69:b0:18:56:d3:76:d1:d9:ad:
e1:a8:fd:d9:e0:0d:26:43:3d:82:8d:f8:3c:d7:fa:
23:aa:a7:99:7c:46:2c:85:4a:82:0a:cd:e6:5a:98:
33:76:7b:0a:e2:5f:c3:41:5c:8b:4a:4b:27:7a:bb:
47:e6:1a:4a:85:4a:5d:12:9b:1a:d6:0b:e2:69:68:
1f:ca:11:ce:27:20:47:24:ac:36:7b:78:43:21:cf:
0b:22:5e:f4:13:b2:59:00:f9:f9:18:d0:5b:c1:e7:
70:26:7f:3d:ab:e2:a7:6d:66:8f:40:e6:97:60:22:
33:61:0f:d8:c1:33:cf:ac:db:9b:d0:ce:a4:20:be:
83:3e:cb:68:a5:40:b3:3c:60:71:d4:99:ac:30:84:
ef:a3:c8:77:06:99:c5:58:b3:bf:b0:fe:5e:74:24:
02:73:1d:fa:b3:95:35:23:25:a9:4d:52:bf:c0:4d:
66:00:c3:ec:6c:99:67:d2:7f:2f:19:78:39:8b:08:
17:c5:63:6f:a9:de:c8:76:dd:3e:22:b6:78:ba:b3:
78:03:94:e9:f3:a4:d4:01:ac:ed:0d:d2:5c:68:1f:
52:ca:fc:8a:b3:97:0b:f6:68:06:04:c2:d8:85:a0:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:85:08:00:07:4F:18:E0:9F:50:21:9B:6E:AD:B7:4D:2C:39:2A
X509v3 Authority Key Identifier:
keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:59:cd:61:b3:43:54:49:e4:51:5d:67:c4:31:fe:23:2c:
ac:fd:3c:34:8a:a0:7b:9e:07:65:6e:49:77:ee:64:33:c5:60:
6d:dd:9e:95:45:67:58:18:5f:72:56:d8:92:23:da:fd:ee:fd:
9d:ac:3c:65:bb:74:2a:dd:ee:0d:d4:e9:50:82:60:81:e9:2e:
04:23:be:0d:03:e8:80:54:55:17:45:85:9d:cb:8a:c9:d9:b5:
50:ab:73:3c:ab:db:6a:a1:24:4f:01:7e:0f:51:fe:29:a9:47:
e1:84:08:9d:74:ba:76:a4:87:2a:f0:a0:47:c3:64:c7:25:4c:
4a:f8:35:66:9c:b2:dd:b4:8f:42:8e:c2:80:ac:bb:59:7b:61:
63:5c:3d:72:81:a7:7f:c1:3f:06:30:ee:cb:b6:9c:45:fb:0d:
20:98:7b:f6:d3:21:e2:b0:3a:a8:5c:4f:c0:2e:9d:dd:65:c8:
a9:8c:88:e1:ab:0e:98:19:60:24:a6:44:8e:e6:47:f3:a2:8f:
22:3b:e7:08:ed:91:22:5e:65:25:10:c4:26:34:03:56:94:61:
e9:19:6d:92:7e:a7:85:07:80:00:e6:67:36:53:4d:3f:5c:65:
45:e3:9a:79:08:a1:9b:05:5a:22:41:07:73:c7:33:a2:38:41:
04:ba:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:18:58 2025 by rpki-client