Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: TjV5Xxek66P3spJb9pWlLgohYQu+9uagO63lOCnEdUw=
Subject key identifier: 0B:15:71:AB:E5:C1:F3:0E:C9:4E:59:FC:2D:8C:2F:11:19:E8:B3:AF
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 0197B745598E4B702EE5CE805A1C57487293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: y2tuQp4iv7tkqMaZQU/02L7vLqQwpcBFO/nYAoWOBTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:59:8e:4b:70:2e:e5:ce:80:5a:1c:57:48:72:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=0b1571abe5c1f30ec94e59fc2d8c2f1119e8b3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:69:1d:4f:0d:14:2a:74:de:a0:43:e6:f6:
b8:66:94:1e:9a:e5:ca:72:21:4a:25:5e:df:ed:fa:
86:c9:72:54:f3:ce:cd:3c:ba:bd:d9:6c:99:9b:fb:
b2:8a:14:90:87:08:20:be:e7:42:44:b7:77:7b:bc:
7e:c1:96:f5:57:39:49:f6:3d:97:64:f2:d6:d2:c3:
c5:cb:c6:81:b7:e0:56:9f:21:90:19:56:2c:89:00:
58:fa:d1:69:5c:bb:5e:8e:41:0b:cc:fe:59:3e:25:
b7:82:9b:d6:2c:af:63:61:62:fe:66:21:f3:7e:8d:
c1:34:85:e8:64:64:19:a7:72:34:8c:38:2a:fd:65:
5c:7c:c8:2b:9b:0b:4b:db:06:51:79:39:62:3d:90:
c9:ba:f3:3e:e4:6a:4b:de:1b:d3:be:a5:a8:e4:e3:
ff:bd:7b:ea:c4:a1:e5:42:cf:84:15:8a:54:9c:0c:
4d:bc:cd:78:7d:60:f9:b8:db:47:fe:1b:b0:78:d5:
d8:c9:d3:42:95:1c:eb:12:97:fb:fb:bb:0d:34:1c:
84:9e:ea:e1:a2:49:58:3d:0d:36:9d:31:67:81:61:
67:b4:12:a4:78:c2:6e:1f:b3:62:8a:d9:13:04:61:
60:62:3e:ec:52:7b:f4:ec:96:9b:e7:b7:a7:43:3c:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:71:AB:E5:C1:F3:0E:C9:4E:59:FC:2D:8C:2F:11:19:E8:B3:AF
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:ed:05:eb:a5:bf:2d:50:8b:42:ab:59:85:39:ff:90:1d:
06:e7:98:5b:d1:1f:11:c9:79:33:e6:ed:5a:58:d7:26:20:c2:
c4:ce:96:37:e8:0f:41:9c:25:94:99:a9:43:39:30:f6:b3:f1:
20:5b:81:18:94:62:e1:5c:3b:63:5c:c2:38:bc:09:3f:02:ce:
8c:c1:0e:fe:77:0a:95:a6:bf:82:b2:be:9f:8f:76:7b:ca:c5:
2b:50:fc:31:f6:6e:cc:64:5b:70:22:36:63:33:37:71:24:b5:
10:f5:00:53:0b:3f:a2:63:e3:be:23:c8:d9:97:84:e0:7c:f2:
5b:03:1e:fb:a2:60:9e:26:c1:78:d1:8e:67:1a:66:09:a3:bc:
53:12:85:6b:14:9b:e2:81:60:a9:a7:f5:a5:54:1a:1b:c4:b1:
71:f2:6c:47:41:1f:da:67:ef:36:8c:45:46:8e:27:83:dc:1a:
93:fa:4e:09:a6:e7:8e:36:67:ec:be:f3:00:7e:c3:96:2d:f1:
38:48:58:76:75:67:54:67:de:c8:27:cb:f7:ff:07:00:a5:45:
a1:75:8d:18:13:94:74:5d:c3:23:bf:2f:4d:39:e3:c9:58:f1:
70:19:3f:5b:3a:9c:0e:4a:bd:8f:82:02:b9:75:15:0b:cc:1c:
05:46:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:58:50 2025 by rpki-client