Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: gZ2BtKhZvs6vg6pJ2t69Am/lNhq7P570Zfnd30nkJ74=
Subject key identifier: 00:D8:B8:7B:AB:7C:84:69:8B:2D:19:F0:07:03:6B:67:FC:75:8F:5C
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 0197B8210571F9723FB9EC78BC6C7B20DC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 0DE0
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: eg/CiCyZ1Oum4hfsGtnRmfbA2fdNiO/uK8pQeXi4oIE=)
2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:05:71:f9:72:3f:b9:ec:78:bc:6c:7b:20:dc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=00d8b87bab7c84698b2d19f007036b67fc758f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:e5:1b:ea:a7:a3:b7:67:38:d9:85:5c:74:
49:e8:68:26:82:45:10:23:5b:f6:4e:5c:0e:b5:24:
16:b6:e3:d0:66:3c:23:e5:42:7f:b2:43:8e:ae:a4:
ed:3f:bd:58:1e:ae:bc:d1:9f:60:b4:7b:bb:00:a2:
3a:c4:a6:27:f6:4c:e8:d0:bf:6c:5e:78:11:10:ba:
85:98:9c:73:70:74:f4:3a:7d:a2:72:a3:15:21:5d:
d7:7a:dd:98:06:ba:96:b4:2a:0b:55:31:ec:69:cf:
3a:9e:f4:f7:ba:7a:00:68:c7:13:c8:15:13:0f:59:
bf:da:d6:28:ce:5c:e7:27:4d:c5:11:e6:9d:16:00:
78:d7:92:fd:0f:ac:3d:ac:bb:60:93:fd:e0:42:a8:
65:3c:80:3d:82:d9:5e:a9:e3:da:59:b2:96:8a:5a:
17:eb:2d:a5:5d:95:85:58:3d:96:47:12:ae:bf:14:
91:66:55:b7:7a:62:08:9f:eb:42:ba:92:9a:b5:3a:
40:11:06:0b:db:d1:7b:f1:65:c2:c0:af:60:2c:7a:
75:c3:34:bb:d0:b4:b7:2b:96:56:7f:b4:bf:fc:d7:
6d:6a:d8:2d:47:b3:49:8f:cb:4e:fe:9e:1f:8f:b1:
46:86:ee:61:50:fd:38:f8:96:d6:3e:cb:0b:a1:04:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:B8:7B:AB:7C:84:69:8B:2D:19:F0:07:03:6B:67:FC:75:8F:5C
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:20:27:ec:6e:9a:63:3b:a7:31:37:7c:70:c2:a4:fa:78:18:
61:10:34:62:b0:1a:c3:b3:48:aa:89:f7:5b:67:ed:4e:6e:1a:
76:58:bf:ee:d7:e6:56:2b:32:f4:03:9a:e7:4c:91:4b:66:75:
a9:31:c1:99:b3:cf:4c:0d:ad:b9:59:5a:b6:b5:0e:78:09:94:
92:57:4f:ff:81:72:b1:46:4a:59:83:a9:7b:50:34:8f:8f:e7:
dc:32:d6:6f:cd:0c:fd:3a:93:9e:b9:d5:b0:2f:f1:ad:da:ce:
41:d1:52:0f:a0:a9:81:9e:5c:5e:87:1c:d5:e6:c4:66:ce:c5:
89:9b:06:b7:db:7b:df:6a:16:06:1a:3f:e5:7f:12:cb:3b:4f:
c6:6d:cd:ce:15:63:53:1e:18:86:e1:9f:39:90:d5:bc:84:2a:
2e:ec:66:b4:36:9f:60:cc:25:9d:a4:8b:0a:db:93:b1:57:16:
06:1e:5e:87:92:40:91:c5:79:02:69:e0:c7:34:3c:bb:17:99:
45:50:e0:44:23:0b:2f:62:31:9c:d7:61:bb:34:e4:85:5a:12:
06:99:d4:c2:cf:8e:be:62:91:f9:c1:a6:84:94:2c:92:b8:a3:
40:42:71:5d:3f:db:74:61:f5:f9:cf:6c:f7:c4:f5:af:38:7c:
09:11:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:58 2025 by rpki-client