Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
File: JOuXPcgi1CNuy911UB0mxD4chzk.mft (raw, json)
Hash identifier: ylCBL/WIptCK5X3zJI9CqY0el4rzU+jsceBP7IjPzNk=
Subject key identifier: 16:46:9B:BA:BC:90:CF:8E:1E:59:DA:E2:92:EE:85:76:FB:D4:3E:86
Authority key identifier: 24:EB:97:3D:C8:22:D4:23:6E:CB:DD:75:50:1D:26:C4:3E:1C:87:39
Certificate issuer: /CN=24eb973dc822d4236ecbdd75501d26c43e1c8739
Certificate serial: 0197B6A0EBFE4DD0CA53F96A724ABF68CA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
Manifest number: 0A59
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: JOuXPcgi1CNuy911UB0mxD4chzk.crl (hash: SWKvyL6+UwOPO98Z6o+yuQxbyRy2uPNK9XoejbNECTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:eb:fe:4d:d0:ca:53:f9:6a:72:4a:bf:68:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24eb973dc822d4236ecbdd75501d26c43e1c8739
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=16469bbabc90cf8e1e59dae292ee8576fbd43e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:d6:2d:c6:2c:16:17:50:a9:e6:4e:de:a4:
be:f5:99:a5:7b:39:59:59:a6:83:b6:63:dd:6d:5b:
8d:79:29:f6:cb:ec:a9:8f:4b:a1:91:a0:e3:0b:9d:
a2:25:e9:78:ee:4d:91:a6:18:03:f3:a4:51:21:6f:
95:86:de:e6:9f:e5:87:6e:ec:5d:f8:9f:49:09:b1:
64:7b:5a:cd:53:4d:b3:a0:e9:5f:69:b3:d2:b2:d1:
68:0e:7f:9f:ff:cf:7c:33:ec:de:cb:71:34:ae:aa:
7c:e9:ac:0c:da:43:d0:37:11:1a:f6:1d:98:d0:91:
e7:ac:7e:ed:91:75:2b:3f:a0:a7:65:85:38:4b:1a:
b6:bb:7c:44:6c:4d:03:5b:b8:fc:be:fe:97:db:6a:
ec:8d:2a:3b:5c:e4:e6:bc:71:cd:95:85:d0:29:1c:
d7:bb:82:e4:47:1e:9f:67:ed:8a:41:52:59:b7:d6:
62:1c:d2:71:7e:d8:f3:b2:ba:d2:24:32:3f:f6:1c:
6c:0d:b0:24:44:cb:f1:76:87:f3:b8:f1:92:06:20:
2e:88:a8:69:4c:63:5a:82:bb:eb:b7:6e:c5:31:2e:
4c:89:95:da:c7:72:a8:43:84:0a:af:a7:c0:20:89:
c7:77:bc:c4:05:70:85:1d:41:6a:5c:19:cd:22:08:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:9B:BA:BC:90:CF:8E:1E:59:DA:E2:92:EE:85:76:FB:D4:3E:86
X509v3 Authority Key Identifier:
keyid:24:EB:97:3D:C8:22:D4:23:6E:CB:DD:75:50:1D:26:C4:3E:1C:87:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:da:b1:21:32:ae:6d:60:8f:fa:f6:54:5c:61:53:3f:a3:
d1:ef:fb:15:a8:b0:88:b3:6f:e1:7d:88:af:de:86:60:86:42:
8d:5a:39:12:fd:5d:51:66:02:0e:d0:20:6c:a5:aa:4d:4e:32:
2f:3a:85:69:fe:15:f9:35:41:6c:ad:0c:2d:6c:c7:ab:77:09:
b9:87:95:cb:ce:25:d7:93:60:88:59:fb:6f:e6:85:aa:ef:ce:
92:f0:12:e2:58:7f:25:11:31:2d:b0:7b:4f:a4:e6:7a:e0:98:
4f:2f:ce:c0:96:2a:b6:21:c6:da:ce:88:b2:ae:c1:ff:c3:b7:
34:13:27:0b:40:64:48:2b:b7:99:2b:d3:0e:2e:83:17:1b:2a:
81:64:f7:9a:be:df:3e:73:41:b8:41:07:ff:d9:0b:83:75:44:
db:36:47:fe:6c:ff:a1:77:fd:3b:de:a2:c6:1d:6a:c8:38:37:
48:fa:87:98:4d:a6:9a:91:f4:4e:ed:53:40:d8:d5:b3:64:4e:
fb:0b:6d:e8:ee:02:e5:67:ae:9d:30:dd:92:22:3e:6e:b7:0d:
26:77:cd:ea:13:ad:68:62:e5:07:39:a7:e4:ad:cf:08:2c:d9:
d2:74:18:ea:54:68:97:4f:a4:09:bf:e6:fa:a7:8f:92:0f:34:
dd:09:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:36 2025 by rpki-client