Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
File: jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json)
Hash identifier: +rmqSz2yQFY6hQuQznmZhmVI+cMe62HRqYl1CuM6sCU=
Subject key identifier: 48:B2:A9:26:CE:52:77:51:5E:58:71:D0:74:7A:5E:75:20:83:6A:B2
Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Certificate issuer: /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Certificate serial: 0197B6A05FF54BB7BD14FCEA434E3284B8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: miqvKsP0mJfn/fHWpOdBX06bUtnBlEkCwg2Rr4wM1No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5f:f5:4b:b7:bd:14:fc:ea:43:4e:32:84:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=48b2a926ce5277515e5871d0747a5e7520836ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:ea:64:3d:9d:c3:69:44:56:d0:37:3c:8c:
72:65:4a:43:2c:73:dd:4d:ee:4e:9d:f5:48:cb:97:
6c:4f:7d:70:11:6c:f0:52:8d:91:75:97:4f:a0:b4:
01:db:72:9f:5d:88:82:53:2d:f4:ff:d6:73:c7:42:
cd:88:0e:da:60:6e:21:a9:b9:90:8f:2c:b8:f4:04:
e4:7a:7b:6b:12:83:a3:60:7f:f9:92:07:26:c2:8d:
02:84:6f:67:87:d1:d0:aa:ca:cf:8c:b1:f7:77:fe:
b1:bf:7f:10:42:53:0c:e8:12:ef:28:4b:14:4e:3b:
6e:1f:cf:63:80:27:54:aa:a9:7a:32:25:a0:b3:e1:
db:38:cf:df:5d:6f:73:02:6e:76:03:62:0d:c6:b7:
85:40:0e:9e:8f:20:63:cb:53:18:d5:96:de:60:2a:
43:6d:e3:0d:b9:5d:1c:39:b9:06:d7:bd:94:9a:96:
92:df:98:bc:b0:bf:b3:2f:5e:52:15:79:9e:24:89:
0a:0f:4e:43:ab:07:17:7c:a8:53:96:eb:12:81:26:
73:00:75:4b:7c:15:45:64:be:92:e8:b8:f5:f4:c3:
0a:a9:ee:52:60:61:e4:6c:4b:20:07:8a:21:74:ae:
78:58:80:a9:c1:e2:b5:cf:d2:50:f7:b6:6c:59:21:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:A9:26:CE:52:77:51:5E:58:71:D0:74:7A:5E:75:20:83:6A:B2
X509v3 Authority Key Identifier:
keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:bd:52:49:8d:d6:25:a6:78:cf:66:ed:6c:63:2e:10:64:
a9:4e:37:0a:10:d0:70:05:d4:d2:8e:8e:05:09:9f:95:65:9e:
37:9a:aa:27:b6:06:41:49:d3:9d:7c:fb:23:52:fd:62:11:0e:
e9:39:65:69:f6:45:3c:0b:98:7d:01:6d:9d:4c:6a:65:5c:ba:
45:05:ff:07:b9:50:bc:76:c1:ba:17:b0:ee:7d:e6:0d:d1:b6:
87:b5:a0:88:cc:5f:a2:85:cd:5e:32:db:98:f4:3a:fb:10:1c:
06:e7:71:35:cd:72:12:98:28:50:09:63:c5:d6:2c:c2:06:72:
f7:02:52:2f:fc:88:67:e1:c4:86:58:2b:ef:39:ca:6a:71:85:
b3:82:fa:9d:4c:b0:3c:0a:66:2a:25:75:06:ef:70:57:01:12:
07:3e:7b:d6:84:94:b5:e4:b5:ce:7a:d4:0f:50:59:00:b4:71:
e4:6a:8a:37:49:59:35:34:f2:b6:d8:5e:f9:25:7a:b9:ce:35:
9c:e3:9c:ab:0b:0f:1b:b3:e2:22:40:d2:73:cc:36:6b:66:42:
e7:15:f5:46:8b:6d:e2:fb:fa:f4:4a:42:8b:a4:69:b1:7f:a9:
27:58:85:8d:35:08:ec:5a:2b:5c:11:6a:d0:77:7c:8a:b9:cd:
b7:1d:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:19 2025 by rpki-client