Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: PlqkZB3XlUHsQr1HsVllqxYJBGY/gc/dRieHXW+9eyk=
Subject key identifier: DA:33:F0:AF:01:CA:A4:E3:42:23:28:EA:C3:EE:4E:56:03:32:0A:AF
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 0197B70E9FF2EED295F0B3D34575CDDC8CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 068E
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: STkbC5ouL9O7l87OjN4udzwSQVkGzK0vZAf4cYlz7rY=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:f2:ee:d2:95:f0:b3:d3:45:75:cd:dc:8c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=da33f0af01caa4e3422328eac3ee4e5603320aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:eb:e9:1a:c8:e3:2a:dc:c5:12:9b:ce:25:
5c:67:81:1e:64:3a:36:29:ae:80:d8:7e:94:32:21:
34:ab:20:04:fe:92:75:87:54:ea:72:32:4b:03:16:
e6:76:24:52:49:c6:d3:40:ce:16:b1:51:88:db:11:
d9:8b:43:f8:80:d9:a2:4d:d0:4b:25:9f:b2:1b:4a:
02:4d:87:78:62:71:94:ac:18:0a:38:be:a7:4c:bc:
95:1e:eb:42:9b:f9:fc:41:e4:9c:73:96:f3:1a:56:
50:3a:c8:38:97:27:61:f4:89:3b:fa:92:b0:ed:3c:
64:0d:a8:8a:25:a6:94:70:15:46:ce:17:e9:b5:86:
64:08:9b:38:86:09:6e:5b:df:64:23:0c:14:89:c8:
11:d0:3d:3c:49:79:ef:7c:d7:bd:db:f3:e3:d1:10:
8f:98:fc:8d:03:89:0b:3d:9a:53:36:1c:13:9a:83:
35:f2:53:02:b6:7a:5e:27:0b:dd:90:bc:27:45:a3:
e2:94:fc:db:8f:f6:30:1f:50:12:24:de:11:4a:c1:
7e:4b:b8:b5:f3:a6:43:29:9b:66:f3:ae:09:e5:c0:
d0:f1:91:40:93:00:6d:fb:1a:bc:ae:40:5e:73:51:
f5:4b:8e:4e:70:07:03:32:2e:ab:3c:3b:13:b7:b8:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:33:F0:AF:01:CA:A4:E3:42:23:28:EA:C3:EE:4E:56:03:32:0A:AF
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:c6:2d:9b:9e:0c:fa:ff:bb:3f:0d:4f:28:5c:97:0c:c0:
15:79:24:ae:61:56:6a:e5:81:3f:30:7e:24:2a:f5:92:27:0c:
6d:d9:4f:58:6c:0c:a4:85:f5:da:79:e8:ca:89:9a:f6:da:57:
ce:81:e1:45:7d:99:90:c9:95:42:22:35:38:04:6e:bc:d5:0c:
85:b8:58:bd:97:20:8e:da:c6:f2:13:97:5d:3a:22:3c:86:c1:
b1:9f:4b:77:c7:e5:7b:ed:7d:76:48:9d:45:01:25:8d:30:70:
f2:4e:bb:90:53:97:3c:1a:62:7b:85:a1:e1:5d:94:a0:ae:15:
10:6b:f6:0d:f6:65:61:3d:48:e5:ea:2e:af:bd:cc:1a:0e:ea:
74:89:39:e4:29:fd:dd:76:fe:37:71:68:a0:5a:a7:1f:a0:36:
5f:7d:41:14:b2:c7:57:82:2d:2e:47:0c:99:a7:c7:16:09:7f:
c0:74:19:ca:0a:8a:21:fa:fc:49:20:bb:4d:dd:f0:7f:ca:91:
41:b4:65:c2:bd:0b:b5:95:b0:1e:03:66:7e:f8:6d:df:1e:5a:
47:3d:85:8d:c9:47:ee:c8:23:66:dd:83:9f:65:43:10:5f:58:
b6:21:59:c8:14:71:35:53:f8:4f:d0:53:00:e6:ad:b7:78:73:
17:14:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:57 2025 by rpki-client