Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: x2O+IEUbW4XWIqzNJ6fy+RD16pqNyLRjDHdZMoEesYk=
Subject key identifier: 7A:23:8E:BB:BE:9B:85:62:5A:47:70:E1:63:CB:50:99:D1:78:D5:A0
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 0197B8FCDDDC72366546BABD7073B78DDABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 0489
Signing time: Sun 29 Jun 2025 00:01:09 +0000
Manifest this update: Sun 29 Jun 2025 00:01:09 +0000
Manifest next update: Mon 30 Jun 2025 00:01:09 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: lKVvZx0FBIDQ0E9HxpgRlxl5jVu3RcAgH8srHUAOTfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:dd:dc:72:36:65:46:ba:bd:70:73:b7:8d:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Jun 29 00:01:09 2025 GMT
Not After : Jun 30 00:01:09 2025 GMT
Subject: CN=7a238ebbbe9b85625a4770e163cb5099d178d5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:9f:0a:d7:a6:d2:cf:3b:5c:9b:42:65:99:
29:02:3e:19:5d:fd:11:0d:ac:f0:96:07:a5:6f:a6:
d5:8d:7b:98:68:b3:31:b9:f0:86:ab:3f:55:1b:f8:
f0:29:ce:e1:3e:cb:88:ef:87:6c:56:ea:f6:1c:9d:
6a:1f:4b:26:d8:86:8a:b1:8f:20:1c:52:ea:27:5b:
62:aa:25:82:27:37:84:8a:1c:c3:36:ea:d7:f8:8c:
cb:69:b5:05:fe:e3:b1:75:94:af:54:1f:52:3b:7f:
9e:d5:b1:a9:a8:6a:e2:76:4f:dd:23:f7:0b:d4:09:
55:0c:ae:43:3d:c3:ce:5b:e1:45:e2:ac:6b:ad:2d:
a9:9f:e7:1a:0a:fb:1b:db:68:26:24:c8:d5:3d:da:
a5:5d:d0:76:8a:f1:61:69:44:d8:e8:58:d3:a9:ec:
8b:e6:13:dc:4a:8a:5d:50:9e:50:56:0b:78:99:26:
ec:ab:fd:36:9a:bc:29:8b:8a:d5:eb:c4:a8:8a:df:
c0:3a:91:0c:90:f6:64:b9:01:bf:a4:8a:df:ea:65:
8b:1f:a7:9e:a2:91:85:9e:79:35:cd:57:fe:49:9b:
7e:19:3a:c2:d0:ef:88:42:89:a9:39:e7:6d:44:a9:
62:fd:e0:ce:52:63:16:f6:4c:71:7a:6b:a8:f0:19:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:8E:BB:BE:9B:85:62:5A:47:70:E1:63:CB:50:99:D1:78:D5:A0
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:14:a3:ba:a9:f9:b1:09:9c:d2:3b:5f:de:6c:34:e6:91:cb:
89:52:6d:d2:49:24:88:69:8b:83:cc:95:42:4e:c5:6f:14:a6:
64:ee:a7:09:be:7d:79:6c:ab:2b:3e:6c:f5:96:f7:d6:cb:5b:
8e:1d:35:f9:eb:28:20:b6:ff:85:23:0c:b9:92:05:5e:92:ad:
a6:50:cb:cb:77:5f:54:39:d7:53:0a:e1:1b:f7:5a:94:a7:74:
4a:fe:91:46:13:45:07:b2:48:9e:50:3f:f4:b3:e2:0c:f6:d3:
28:ca:13:d8:fb:ac:41:b1:73:29:45:05:25:f7:8b:89:af:8f:
5d:f7:df:2e:18:41:84:0f:b9:a7:c2:cd:70:55:e9:67:cb:9a:
72:ad:9c:52:73:66:e2:e1:f1:fc:f1:45:94:b2:15:79:87:3d:
c5:ce:f0:ea:7d:5a:f4:d6:ac:8b:ea:5e:40:86:6f:40:67:1f:
05:48:aa:e5:f1:4e:38:ca:80:73:6f:ff:e1:4c:1c:17:7b:65:
5c:d7:a9:66:43:e2:05:26:0b:06:10:73:be:f3:65:94:b2:d9:
a5:73:b6:60:50:06:0c:ae:06:ae:a9:3d:d8:a2:39:fc:f3:50:
e7:d3:63:07:e3:10:b3:69:bd:ac:ea:92:f2:d0:ee:08:6d:32:
db:5c:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:46 2025 by rpki-client