Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: 7LV0r2QTtJjG5Tr7vcHQ8wVG7xQFR4U82giR+HfYNDU=
Subject key identifier: D3:06:C8:2B:EA:11:02:C3:EF:48:FD:93:32:2C:B1:19:CF:53:34:23
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 0197B745576E52F966D77B3758BF2C86C928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: NNvQCWNffeCOexrOkk5HYgi+vD9RWROXPxzDRjkBy1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:57:6e:52:f9:66:d7:7b:37:58:bf:2c:86:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=d306c82bea1102c3ef48fd93322cb119cf533423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:3c:e4:fe:b9:3d:4f:65:4f:4d:93:bb:88:
e8:86:0b:ed:7c:8e:d9:6e:87:0f:a7:1e:15:10:7a:
aa:fe:25:39:56:a6:7e:3d:fe:38:84:69:69:93:75:
e7:14:cc:19:91:2d:ea:0c:d6:9f:8a:10:75:5a:19:
2b:24:36:8a:6a:4d:40:62:3c:b6:8b:4b:bd:1d:83:
bc:11:74:cd:d9:e0:d5:9c:9a:e4:f3:d4:09:92:33:
3e:f2:c7:ff:47:30:fb:36:26:1a:4b:5e:a7:73:83:
b4:b1:de:38:ef:41:dd:90:a9:30:fb:43:a0:7b:11:
dd:76:17:06:c4:8f:0a:b6:5c:82:04:ad:d5:2e:71:
b7:78:87:05:2f:76:db:6a:ce:61:18:13:74:1c:cd:
7d:aa:3a:d1:88:99:44:39:ea:ce:68:e0:db:a8:2d:
b7:5f:cd:24:e0:fe:03:7d:02:ee:53:3e:cf:34:1a:
b4:bd:fb:f2:a8:f4:32:e7:cf:08:27:26:8b:ad:2b:
99:b4:32:68:88:ba:51:8d:44:93:fb:8e:f7:8f:1f:
6a:10:2a:a3:33:8d:a7:f5:32:c6:ec:25:16:91:01:
17:14:85:bd:3b:3e:29:68:75:d4:c1:e1:40:56:4a:
9c:2d:23:32:4f:b2:5f:9e:51:c2:2e:87:78:5a:c4:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:C8:2B:EA:11:02:C3:EF:48:FD:93:32:2C:B1:19:CF:53:34:23
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:38:6b:0f:24:e7:3f:84:26:ba:38:bf:12:59:fb:f5:b9:ba:
e8:ad:2e:bb:ff:16:65:2c:32:00:17:8e:72:d6:35:3f:b3:da:
5b:0b:e8:e1:dc:1d:87:cf:c7:10:9d:2f:3d:0f:e8:28:32:6e:
d1:fd:b3:18:d4:44:4e:6d:05:36:4b:da:69:b1:25:2a:73:52:
0b:7a:45:a7:72:b4:63:a2:df:ca:c6:d9:1c:8a:ac:35:f4:97:
04:0e:78:90:93:8d:d6:cd:06:3f:07:a5:be:74:72:8c:bb:09:
2a:6a:da:65:fc:2d:9a:e0:e7:2f:70:2e:97:89:c7:d8:5e:cc:
42:ff:ef:24:10:01:59:ad:b9:56:d9:f4:ff:33:f5:97:d5:88:
22:40:2d:d2:2a:ea:8e:d7:f0:26:76:c5:02:de:a7:c3:c2:00:
be:56:cd:3f:d3:e1:11:df:10:c1:39:0f:74:d8:da:cc:83:c7:
71:88:81:7d:21:2a:1d:4f:8d:97:5a:15:56:b1:a6:78:48:10:
1d:66:ec:b8:63:39:21:81:43:7e:45:b1:64:5f:fb:e4:b4:36:
e1:59:41:5d:04:64:2f:19:1c:73:de:02:04:62:75:0d:7c:14:
7c:18:a2:e4:62:53:38:e7:03:56:f2:66:c1:f3:01:5b:52:da:
85:8d:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:30 2025 by rpki-client