Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: mh1nuyWthxHOqMb/GfqydVeMvQh2WXaSEpihczSCiwc=
Subject key identifier: 27:30:C1:D6:3B:45:96:DA:2D:D8:EB:10:BB:E8:64:31:56:D2:BC:E2
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 0197B74540A401D00C1EE69F075EAC014301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: l7+WYu7JNZDpx9difdl5mq65yx8r8Yjb5ijtb8hKAa8=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:40:a4:01:d0:0c:1e:e6:9f:07:5e:ac:01:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=2730c1d63b4596da2dd8eb10bbe8643156d2bce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:f0:4a:93:d9:3f:7b:16:9a:c0:a2:5c:26:
45:2f:fc:c6:5a:92:3f:c9:9b:b3:b7:29:ed:7f:72:
82:c4:42:09:96:da:a0:9d:8b:5d:9e:82:ab:05:85:
8e:ef:17:bd:9a:ba:b8:fb:f2:f8:25:52:69:64:d8:
b9:eb:4a:ed:b7:6c:41:0e:5c:d8:7b:b5:7f:7a:f2:
d0:7b:e4:f7:89:1f:c0:f7:99:4f:02:ba:8e:aa:71:
f0:ee:1f:88:ee:31:61:13:a6:9a:3e:30:bf:12:81:
33:89:fd:97:07:c0:fe:b1:66:34:33:cb:52:36:b2:
cb:86:02:7b:a7:c7:24:a6:6e:75:37:41:b5:e0:dc:
62:98:7d:5e:d1:a9:ab:be:8a:4b:6c:32:50:e0:29:
ef:dc:7d:28:69:13:bd:77:88:2a:0f:16:0c:10:4a:
a7:ff:d5:95:5d:e6:65:a1:0b:94:3a:78:75:63:a9:
ad:5f:9d:f5:82:d8:8d:e3:6f:c4:e0:4f:2c:d5:9e:
b9:22:1f:1d:88:4d:d4:14:42:8f:13:1b:a7:29:b5:
4f:3a:fd:c6:54:88:6d:3e:0b:64:78:61:3c:54:13:
42:26:5d:4b:67:2e:c5:10:00:cb:e8:1c:21:6c:96:
41:76:6a:b7:f5:a5:8a:b6:8a:f0:7c:92:1a:29:72:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:30:C1:D6:3B:45:96:DA:2D:D8:EB:10:BB:E8:64:31:56:D2:BC:E2
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:41:5e:2c:a7:c0:fd:90:3a:89:ac:c8:e1:b3:16:fd:9d:
46:e3:66:f9:45:c5:69:f1:60:e8:16:8b:0a:00:a8:63:c4:89:
7b:8f:6e:47:a4:31:a8:f2:c9:ea:42:1d:af:a0:f7:1a:45:02:
22:86:fb:3f:93:ab:e8:5c:90:bc:7a:e0:f7:31:68:8d:05:e2:
ab:7b:6a:5e:39:47:11:b0:c3:1c:ac:12:98:61:e3:6f:2d:5f:
76:d7:45:39:4b:b3:21:e2:b6:92:49:b2:5a:11:fc:f2:4c:da:
65:0f:06:0b:fb:c4:21:80:e7:af:26:62:2d:ef:5b:8a:0c:2f:
11:74:73:e0:0b:d0:01:42:19:05:ef:ec:16:79:1f:aa:8c:23:
8e:c3:7b:94:80:c5:71:4a:b7:fe:75:75:36:0b:5f:94:11:8c:
f4:d4:78:94:36:82:65:3f:55:37:ab:ec:d0:ab:5a:95:2b:82:
95:63:4c:f4:2f:57:cc:55:16:b2:86:ae:37:c4:3a:7b:2e:85:
66:d8:f8:5f:2a:3b:ee:04:87:18:2c:bb:99:a0:b7:5a:e6:c3:
56:dc:b2:29:be:f0:06:f9:9e:c0:82:07:45:18:6e:36:c3:23:
82:d6:78:40:44:cd:c9:7f:93:ae:29:fc:68:20:c7:24:4d:49:
4f:e7:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:24 2025 by rpki-client