Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: U5cAAUwUu/D2woZ0g1wxpchQ1Jof1e+VimUNsV+VqI8=
Subject key identifier: 4D:D1:BC:AF:CF:2F:09:15:B5:66:B5:9F:5E:A0:10:EA:53:DD:BF:CF
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 0197B7EA1E85A77588F133D0F80EB08C1B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0A08
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: EadzIwpdlKSM51zPeI2JPfnNYIB6DH7wEv0hz6OamD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1e:85:a7:75:88:f1:33:d0:f8:0e:b0:8c:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=4dd1bcafcf2f0915b566b59f5ea010ea53ddbfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:d9:d5:55:34:00:e3:79:4e:08:73:ab:88:
b8:d9:44:54:3b:07:c7:53:48:e7:61:e3:70:34:06:
b6:85:e2:e1:14:e6:92:41:5d:ba:b2:5e:52:a6:a9:
af:6f:2b:0d:94:a7:1e:f0:d3:de:0e:8a:4d:c4:91:
77:f3:02:b5:e4:40:88:60:97:27:4f:2d:23:4e:bc:
0e:e3:04:7c:66:30:da:9f:d8:c9:6b:42:6f:eb:bb:
6e:26:c0:45:63:1a:0f:ad:15:bf:26:00:e6:84:c5:
5a:30:93:e6:0c:95:07:94:bc:c8:f3:bb:0d:e1:e7:
2f:b3:25:4d:2a:22:1a:03:15:12:2a:b5:65:63:76:
74:25:24:19:63:97:6c:52:db:7c:f4:a4:79:ba:2f:
5b:1c:1d:dd:14:bf:93:2d:1c:a5:80:cb:6f:f2:f9:
33:9e:8b:68:ce:9d:dc:38:92:2a:07:97:11:7e:cb:
a4:60:11:d3:af:6e:26:58:34:7d:f7:93:25:b4:41:
7f:4f:aa:21:4c:84:b8:f9:96:a9:a6:84:d1:ee:82:
4a:53:cd:36:3a:9f:f4:03:1c:68:ce:54:fd:a7:8e:
be:9e:58:6b:b0:53:cc:ba:12:4a:02:55:40:00:81:
ca:f5:fd:92:9d:9f:8e:97:bf:f6:80:d0:de:df:7f:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:BC:AF:CF:2F:09:15:B5:66:B5:9F:5E:A0:10:EA:53:DD:BF:CF
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:73:b7:97:c7:e6:27:98:16:f4:da:36:ab:b1:e4:4f:e2:
fb:34:30:24:90:39:17:cf:89:f6:9b:3a:3b:40:a0:45:ec:62:
17:d7:ff:09:01:9c:90:b5:52:75:e0:73:bc:29:a9:b2:be:c3:
8b:8f:c8:27:8a:90:b2:f6:3c:55:be:6f:aa:ab:6a:bf:6b:4c:
f6:68:6c:b8:01:58:84:ee:6b:2c:ff:b2:f1:ba:9c:8c:c0:f9:
43:4f:74:f8:95:b4:f4:85:e2:9a:fe:d2:90:dd:fc:1a:c9:f5:
57:14:9f:8f:f1:98:18:6e:b2:17:91:fd:00:50:a8:d7:48:0a:
99:7f:2d:e0:95:d0:10:1a:ac:48:39:d7:a8:99:0c:ef:7c:ff:
ea:a9:79:45:e9:c7:c0:06:93:5e:56:b1:a7:f5:c2:ac:79:89:
e0:31:61:b9:59:30:b8:01:23:05:b1:74:0e:8f:6c:3b:74:a3:
80:b6:eb:1d:c0:36:87:aa:01:52:c4:7e:21:2a:f4:3b:99:01:
2c:79:30:6b:93:d2:b5:27:b5:2d:b9:c0:99:3a:8d:cf:49:fa:
7b:36:06:0b:bc:54:40:85:92:5e:70:4a:bb:d6:11:86:f4:9c:
e2:52:59:d1:a7:76:25:32:e6:c8:30:90:19:d2:21:44:4c:51:
59:4c:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:49 2025 by rpki-client