Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: ebnPPynBOGe5EEjMAurUtATXPc+LDg9y/ItDdxNmkE0=
Subject key identifier: 09:1F:C2:C0:45:A6:F2:A7:16:FE:1B:B6:96:FC:9A:DB:15:D5:57:2A
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 0197BB598B1AB6F6D4B822562135E47CC1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 1188
Signing time: Sun 29 Jun 2025 11:01:37 +0000
Manifest this update: Sun 29 Jun 2025 11:01:37 +0000
Manifest next update: Mon 30 Jun 2025 11:01:37 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: 9LZ4girD72CS4lpRqWmJhWF+JBdBCHP+pbHyf9wvgVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:8b:1a:b6:f6:d4:b8:22:56:21:35:e4:7c:c1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Jun 29 11:01:37 2025 GMT
Not After : Jun 30 11:01:37 2025 GMT
Subject: CN=091fc2c045a6f2a716fe1bb696fc9adb15d5572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:55:1c:26:af:14:62:2f:1d:0e:2c:58:89:
b0:5b:a0:74:25:b3:7d:85:a3:d1:ed:97:1c:e1:27:
ba:a3:f6:09:69:f4:e4:84:c9:cb:18:35:69:0d:f1:
f0:01:56:48:7f:82:a7:bb:94:98:95:02:65:28:92:
0e:fd:26:9b:2c:52:59:bb:07:30:a8:75:d0:ef:8d:
6f:fa:dc:dc:7b:56:37:cc:e9:88:2a:ec:b7:45:10:
c0:3e:86:0c:15:66:52:9d:66:31:9a:9a:a3:4d:01:
5e:42:0c:f5:c6:af:20:27:29:8c:6f:93:21:50:0c:
0b:c6:e3:87:e3:b7:fc:b5:03:cf:bd:91:da:a7:2d:
c7:58:81:11:7f:c9:9f:8c:0e:9a:a4:1c:86:79:65:
af:b5:ac:75:da:80:e5:14:f2:7c:0e:6c:06:0f:32:
53:be:9f:4d:3d:ca:c3:b6:60:fb:77:0d:0a:db:24:
91:3f:f7:c1:29:80:8b:cf:96:71:9b:18:60:bf:36:
7b:4d:10:8e:4b:3d:b8:90:40:4a:ee:dd:18:0e:a1:
6a:5b:48:5b:3b:b6:ee:15:49:44:91:26:c2:ae:57:
24:04:bb:ea:cb:db:9d:6a:9f:65:da:ee:cb:6f:d8:
29:7b:4b:3f:00:da:15:21:6d:a6:fc:09:a1:f6:64:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:C2:C0:45:A6:F2:A7:16:FE:1B:B6:96:FC:9A:DB:15:D5:57:2A
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:56:dc:b5:4a:bf:c0:8e:1d:cf:17:ac:30:77:b0:bb:37:a8:
b7:63:fc:7e:af:88:69:c7:f1:67:ce:2e:a1:e0:e8:2d:ac:bb:
08:b8:13:2d:3f:d8:07:3e:6b:e5:a8:2b:18:13:91:7e:c8:c0:
62:4b:ae:23:fe:e3:ab:ed:90:7b:93:da:46:25:db:3c:d1:69:
65:42:cc:98:e7:dd:cf:d8:5c:98:41:33:fd:f4:95:e7:e5:35:
61:a4:0a:30:00:05:33:9d:4c:f2:08:41:b0:d5:84:83:6f:ad:
f8:70:03:61:2a:84:e5:07:38:1c:24:6c:c0:1b:e0:39:d8:0d:
e8:e5:54:6e:b9:c2:f2:52:26:35:58:8e:9b:d5:ec:16:ea:33:
c8:34:bd:3a:4f:48:26:1e:cc:a1:c7:b9:85:48:4c:25:38:33:
67:6d:fa:1a:c1:fd:b1:0b:64:75:0d:e7:0a:7d:a5:5d:49:f5:
98:0b:c3:43:c8:f8:55:00:18:db:ec:8e:01:49:92:d8:db:45:
b7:d1:5e:b8:6b:0d:8a:23:12:08:72:1e:92:d4:b9:7b:92:9b:
cc:e2:e9:a5:09:6c:60:bf:77:b6:d2:c7:fe:00:fe:5e:49:f9:
1d:f8:a8:75:d9:6b:e2:32:1b:5f:f7:29:cf:e8:92:eb:ba:3d:
bf:33:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:15:22 2025 by rpki-client