
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier: oweeIv5pyEjze54nU1HiFhX3SOuvhZo/z2tz7kHlQyM=
Subject key identifier: 66:96:7E:98:19:6E:52:DA:1E:F3:40:0A:3F:7D:B0:54:5A:9C:D8:2A
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial: 0197C42552A99ED63159AD6B35782B629522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number: 0433
Signing time: Tue 01 Jul 2025 04:01:09 +0000
Manifest this update: Tue 01 Jul 2025 04:01:09 +0000
Manifest next update: Wed 02 Jul 2025 04:01:09 +0000
Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: w0Md7tBlpBkyUWbxKIbTwuGe3nt3K+I3atz8XkRshHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:52:a9:9e:d6:31:59:ad:6b:35:78:2b:62:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Validity
Not Before: Jul 1 04:01:09 2025 GMT
Not After : Jul 2 04:01:09 2025 GMT
Subject: CN=66967e98196e52da1ef3400a3f7db0545a9cd82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:58:07:b2:cb:0a:a5:26:e3:9f:c7:c6:9b:a6:
2e:8a:ad:f9:68:2d:af:fd:2f:9c:46:9d:5a:4d:e7:
57:79:35:47:4c:0b:7d:f6:13:e3:24:3c:62:57:3a:
50:ee:9e:a4:82:3a:63:cb:ce:e7:ce:cf:55:ea:87:
4e:50:ac:0c:6d:29:20:cc:52:10:bc:78:01:53:82:
d3:91:82:0e:62:64:85:16:3e:21:1f:7c:97:26:4d:
fb:86:d7:61:44:6c:bd:ee:27:e5:0a:fd:85:18:2f:
75:69:ec:c5:3f:b5:b0:40:3a:34:fa:1b:19:61:3a:
ab:4f:73:73:bf:e3:e3:87:9a:ed:cf:32:8a:f3:5b:
72:36:9b:3b:77:01:24:13:a3:e9:68:59:a3:d6:55:
19:83:d6:ee:2a:6c:6f:98:fb:c4:31:02:00:bd:f2:
a8:2e:3c:e5:60:bf:f7:3a:a5:5c:0d:56:30:f5:ac:
f9:61:2f:46:d9:c5:84:2f:7f:2c:3b:d6:6d:b8:87:
35:74:1f:c0:b4:f5:e6:0d:3f:68:8a:98:42:91:cd:
ef:72:ef:5a:c5:7b:37:ab:b3:4d:3c:86:e4:99:01:
e1:7d:d9:ad:59:27:7d:be:5b:b8:67:18:ec:4b:b1:
dd:33:28:a5:2c:9a:9f:46:d0:91:1b:d1:4e:09:90:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:7E:98:19:6E:52:DA:1E:F3:40:0A:3F:7D:B0:54:5A:9C:D8:2A
X509v3 Authority Key Identifier:
keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:cd:d5:34:9a:a2:64:a3:68:dc:1a:27:75:df:55:b6:ca:
6b:ba:11:0c:4f:f2:67:8b:6d:1a:8a:4a:d9:db:3b:3d:b9:47:
2e:4c:85:ca:b3:32:d0:71:84:69:3a:a4:87:cf:be:f9:9e:5a:
7b:9d:55:f7:bf:35:25:6e:72:51:3d:77:71:67:5a:fc:e6:3d:
6d:4f:e0:88:68:f2:c2:a0:21:b2:01:6e:0e:05:a5:75:3f:20:
c6:54:e8:5c:aa:fd:c2:25:d9:f6:78:b8:6b:20:75:ed:db:b5:
d0:0a:d8:cf:26:5f:72:3f:5b:8a:d7:11:ac:88:bc:e1:aa:04:
80:4a:7f:f7:fa:f5:b8:de:f3:0d:d1:08:cb:e0:c3:e7:08:55:
ea:c9:7c:d4:97:c3:cd:a3:63:99:bd:08:b4:0b:cb:c8:3c:44:
64:f1:52:8c:36:c6:9b:16:0f:79:e3:14:b0:66:66:ac:1c:28:
86:c2:7f:8a:a2:a7:e4:c2:a6:65:49:a0:58:22:59:49:a7:77:
88:37:2a:44:cf:40:5f:ce:e4:b3:2e:89:cf:21:8f:80:26:32:
dc:24:19:bc:85:72:72:a8:ef:c9:71:2d:2d:e0:25:be:ae:af:
53:48:f3:14:e0:33:3c:ab:98:6c:b7:6d:53:26:67:85:fb:33:
43:6e:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:53:22 2025 by rpki-client