Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: iQ0W3Iz7VtFqDNZb+isusvcWbe0YHhbd4i5fr+zCplw=
Subject key identifier: 9E:5D:A7:88:12:C9:0D:A9:EF:C4:01:56:C8:2B:43:47:51:EF:40:58
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 0197B6D77AC83D299B22D92357327F4B9F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: 36
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: d0MAAeFejUDH38uqsFYjzjcOwIjm3NzAP++f9OacSZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7a:c8:3d:29:9b:22:d9:23:57:32:7f:4b:9f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=9e5da78812c90da9efc40156c82b434751ef4058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:de:f8:90:e5:93:19:ef:3e:6c:2d:7a:d5:
9b:89:ee:e5:e5:09:f9:aa:f6:09:c2:c3:d0:79:f2:
15:e0:d5:96:0b:44:b4:94:87:26:33:25:6b:1f:c5:
51:42:d3:41:03:de:69:64:97:31:02:74:7e:c3:41:
86:88:41:7a:69:79:76:cd:b2:6b:28:8f:c5:ab:10:
bf:82:4d:63:4a:e7:07:5e:3d:d8:1e:21:f0:8b:52:
6a:ad:64:64:df:b2:9c:61:51:96:0e:5a:5c:c1:35:
e3:10:b0:76:a5:1b:6b:d6:68:55:21:90:50:2c:da:
44:70:4e:8d:11:57:62:08:31:3a:4a:42:f9:93:43:
5a:13:5b:a2:06:c4:b7:79:3a:a0:2b:d7:14:d5:34:
a6:72:2d:04:6e:73:c9:ca:41:99:83:c3:04:6f:9a:
ea:eb:92:6f:9e:82:ac:62:97:45:6c:c4:87:eb:4d:
09:46:51:99:b1:9c:a5:93:51:23:91:49:0f:27:41:
09:b8:73:34:23:f8:7f:47:9b:29:f0:1b:43:2d:7b:
79:0b:73:43:43:2d:f8:f1:4f:d2:9b:65:0e:46:ca:
aa:e0:b2:7d:2b:0a:5a:3c:62:7a:0f:ad:3a:2b:d7:
84:94:5d:79:e0:a3:f5:29:b0:b9:1a:93:13:2e:64:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:A7:88:12:C9:0D:A9:EF:C4:01:56:C8:2B:43:47:51:EF:40:58
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:0c:67:a0:70:64:3d:cc:83:1f:97:04:83:a3:ff:ae:b8:
ef:ca:f8:b3:09:ec:f0:63:1f:9f:0f:a5:24:0e:5a:9a:74:86:
7d:36:53:9b:34:c4:16:7b:ec:ab:3f:b5:80:e5:27:63:70:a7:
92:d2:54:ac:bb:79:9f:4d:b7:35:20:b6:ff:48:cd:55:ab:3b:
ef:c8:38:ad:6d:03:7b:a2:0d:9e:c0:df:a4:9f:e5:2a:e2:c0:
cd:54:39:41:db:f3:33:14:c3:f8:cb:a7:2b:d9:c1:57:85:33:
ef:6a:bb:68:d2:a4:dc:56:53:63:a5:1d:93:99:26:ab:82:ff:
22:4c:9c:84:4b:66:5f:9f:2d:95:ae:59:19:cc:fe:a8:8d:7f:
ff:ec:8d:08:63:a4:70:b9:e2:11:a3:ae:b8:a2:2e:fa:95:2f:
cb:f2:fe:55:69:7e:b3:bc:11:59:47:ee:07:8b:66:54:df:df:
b6:fd:8e:d3:9d:e7:8a:40:c6:c5:ef:5b:1a:c3:85:17:35:41:
8a:16:27:1b:ce:53:3f:27:2c:9e:e1:86:c0:b6:b3:69:b3:53:
ac:a0:64:bb:82:20:d0:d7:c6:de:4c:04:df:d1:a9:85:7d:56:
c0:c2:d0:ce:bc:6e:68:f3:00:e4:55:e8:06:dd:a1:a3:9a:ca:
35:d3:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:52:00 2025 by rpki-client