Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File: jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier: jKcd+kVBkO+cioasnCnv2KkGhJlFLKVQpQlfmpLBeSo=
Subject key identifier: 5A:B0:F1:D5:08:84:84:07:43:09:BD:65:02:2A:2F:08:17:4D:2F:78
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer: /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial: 0197B70E7303522742D1C978EB8205DD8A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number: 11FE
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: 47LdmSNkOmzadqPksRtmJrq3/gSmmQ6jOYizCTVhflY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:73:03:52:27:42:d1:c9:78:eb:82:05:dd:8a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=5ab0f1d5088484074309bd65022a2f08174d2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:60:7a:75:fe:9f:b2:d6:70:f8:9d:f7:96:
02:a8:6c:0f:e5:16:d6:f6:96:c9:f1:5a:b8:90:df:
83:2c:f0:1c:0d:67:a2:af:a1:23:df:33:c3:f1:e4:
2d:a3:7c:4a:ca:48:e6:e6:67:03:ed:38:b0:1d:ac:
ad:ce:19:25:25:33:d5:98:e8:41:56:3c:c3:82:a9:
f8:bb:3a:ce:b9:a8:a4:46:07:db:0f:c0:01:e9:0c:
59:41:df:84:b5:5d:5f:89:a9:6e:24:e8:14:5f:b1:
d8:46:1a:80:a1:cd:73:5f:6b:2b:7b:ac:ca:28:2c:
f3:7b:d4:da:c1:45:1a:27:7b:bd:1d:e0:e1:af:cf:
bb:14:6a:b6:88:5e:30:19:4c:7f:fd:e1:b1:ce:73:
a4:a5:e8:a8:21:3f:df:02:73:9b:a0:73:e4:91:87:
50:e7:ef:b9:e0:80:8d:cc:c9:0b:a9:0e:ab:06:df:
97:2c:d4:8a:62:0b:e4:f5:5b:e7:d7:3d:cf:4d:db:
cd:d8:3c:28:5b:8b:87:c5:48:3c:f8:ac:f2:41:4e:
57:75:8d:d6:76:87:9c:cd:23:37:ee:81:d4:f8:ad:
65:88:a7:06:c0:40:2d:cf:e4:bf:d8:f1:4c:74:9f:
af:d7:2a:ae:81:e8:f6:25:76:6a:3b:5a:48:4a:e5:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:F1:D5:08:84:84:07:43:09:BD:65:02:2A:2F:08:17:4D:2F:78
X509v3 Authority Key Identifier:
keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f5:af:f2:db:59:d9:56:14:3b:62:6e:f8:9b:37:5b:f7:f2:
8d:8d:85:81:06:de:57:6b:19:64:f5:d9:15:6a:98:f1:6f:41:
7f:9a:dd:aa:e2:12:28:1e:bc:f3:57:4e:ce:74:20:01:cc:62:
dd:f9:ca:ff:43:34:f2:ec:74:59:ab:c0:c4:c9:d8:df:a1:25:
36:12:53:a8:c4:d0:fd:6c:f8:cd:c9:d0:8d:79:2a:d9:03:1c:
3e:c2:d7:46:10:a4:af:44:a5:bc:ad:a7:69:80:e4:35:45:95:
ff:33:d2:00:70:2b:46:3b:14:50:1a:69:4c:8f:d0:a5:9f:b5:
7b:0e:dc:6a:3f:ea:5f:fc:42:e0:d1:6c:9d:5a:cb:97:ab:87:
ad:00:31:dd:6e:ff:93:14:e8:5b:08:f0:44:0b:6b:0e:dd:1e:
b2:f4:02:e3:67:82:bd:8a:88:ee:ae:1f:a9:b3:1c:e9:44:11:
ea:db:6a:d0:73:d7:8b:13:ed:13:e1:0d:a4:e6:01:e5:18:51:
e6:4f:7e:3b:6b:da:16:a5:69:bc:7a:aa:86:55:cd:35:a5:f1:
2b:47:05:ba:75:b5:01:54:f5:24:c2:a7:12:61:bd:59:3c:a8:
d6:6d:a9:d4:f7:09:3f:39:ea:61:9a:55:84:5c:e5:73:c2:25:
a6:56:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:24 2025 by rpki-client