Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: IBrv5VAD7Q+Tz/zB0MIhZLI/A0RVWW7xT9FayOofbKU=
Subject key identifier: 69:61:8E:6D:74:2B:E6:45:D3:0A:B0:54:39:26:73:02:AF:CF:D3:EB
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 0197C6B8BE435581E5007FF3903E553E0101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 0E10
Signing time: Tue 01 Jul 2025 16:01:25 +0000
Manifest this update: Tue 01 Jul 2025 16:01:25 +0000
Manifest next update: Wed 02 Jul 2025 16:01:25 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: jp1jdKpTXixwS76hC2qXGAn3Ogsc6EeGutgPb5T3xis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:be:43:55:81:e5:00:7f:f3:90:3e:55:3e:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Jul 1 16:01:25 2025 GMT
Not After : Jul 2 16:01:25 2025 GMT
Subject: CN=69618e6d742be645d30ab05439267302afcfd3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:88:a8:c4:43:05:5e:33:88:e9:71:4c:08:
07:64:44:fa:33:b7:69:db:60:eb:61:ba:e6:6b:fb:
ec:9d:57:42:fb:86:b5:82:f5:ae:15:42:6a:3e:e5:
cb:6e:6c:9a:e1:79:77:82:46:df:a4:ab:4e:ee:18:
ae:20:9c:33:9d:9b:97:33:49:ba:64:0e:f7:e0:90:
44:17:ee:db:f0:69:a5:6e:f8:21:a3:a4:52:4e:62:
17:14:3e:a7:ff:3a:e5:74:9b:79:60:70:e5:4f:03:
c7:7e:63:44:d6:e8:96:9a:66:dd:b2:6d:29:17:51:
86:d9:26:18:0e:c2:fd:6f:da:13:de:d7:48:71:4f:
ec:dd:24:ad:d9:9d:d3:a8:4f:69:41:f4:19:c6:de:
e5:8f:5e:b6:cc:67:44:a0:58:1c:c9:7e:6a:ec:59:
4a:ad:1e:7a:75:b8:27:ec:33:46:71:62:16:e5:87:
b1:d1:92:6f:e5:08:80:fb:d2:08:7a:d9:c3:de:7b:
1d:b3:a7:85:c5:90:22:a8:a8:e3:3f:ce:ac:f2:ac:
93:5d:f6:11:c5:61:ff:d7:a7:0a:36:b7:fc:21:47:
fb:f8:8c:3c:01:6e:18:5f:64:dc:7e:e8:c2:32:ad:
76:d5:0b:68:c4:f7:72:a9:9d:6c:d2:1d:7c:23:6b:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:8E:6D:74:2B:E6:45:D3:0A:B0:54:39:26:73:02:AF:CF:D3:EB
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:13:d6:94:4c:59:40:31:5d:fa:bd:37:6c:07:2d:54:0c:77:
1f:c9:1a:b6:44:ec:48:75:d7:37:d2:99:ce:c2:ba:4d:02:d0:
bf:4a:85:0b:85:cb:e4:f6:d2:48:46:c2:c4:d0:d4:9b:a9:d6:
df:95:dc:cd:19:e4:1f:a5:4b:ba:78:e1:71:f7:b8:a3:f2:e5:
8e:f3:98:11:13:bf:fb:4e:d4:9a:38:ac:2d:4d:1b:70:a5:28:
a6:f1:25:61:98:69:79:bd:dd:d2:90:64:6a:be:3a:b3:50:ff:
41:03:9e:1b:f2:17:dd:23:ac:c7:e0:3a:7e:a8:dd:20:3e:a1:
e1:60:26:a2:55:b1:4e:5a:f0:e2:fe:6e:e0:c9:b9:0c:8e:22:
cc:16:88:5b:2f:61:0b:25:9d:f5:84:fd:de:67:f3:5a:ac:82:
09:07:fc:12:74:67:1e:a7:8b:00:41:96:5d:d6:2d:7e:ac:3c:
e1:3e:63:1a:9f:ee:59:99:e0:cb:e8:c2:0b:e5:ca:18:86:2a:
92:b1:8d:5e:20:b8:46:c7:bc:9f:4a:0a:1b:da:a2:89:8b:0b:
a3:a2:67:33:54:99:f6:57:25:5f:ca:ec:3c:ec:72:21:69:85:
52:a3:80:9d:77:d3:fc:33:40:09:17:af:99:16:08:87:ea:81:
eb:d2:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:41:26 2025 by rpki-client