Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: NvgXS2GMDaELUcdldHu6qiAO5Iv3Pdv/KUn4wpWavLc=
Subject key identifier: 86:26:91:8D:45:C0:97:65:E1:EC:B3:C7:E8:7A:D5:1E:D6:23:05:6A
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 0197B6A0F27C371AFAF0310A5FE7D205CAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 0F6A
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: vvXUKJ2Q5eXDtUBSwhH1ozkUFNltS2PwwJe6FStNul4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f2:7c:37:1a:fa:f0:31:0a:5f:e7:d2:05:ca:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=8626918d45c09765e1ecb3c7e87ad51ed623056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:61:5a:07:ce:63:4a:26:b4:1f:db:ee:d4:
3b:6c:94:50:b7:63:c3:3f:c2:b3:af:92:80:04:0e:
5c:af:4a:7d:45:d6:13:06:78:44:a9:45:b6:f2:c4:
cd:f3:27:21:90:e5:3b:ac:70:8f:30:ae:11:b9:13:
8c:7f:fd:37:21:a8:b1:2e:a4:d9:c9:8d:db:c3:cd:
01:9f:93:f5:9c:47:a1:33:b1:8c:d6:e8:90:71:16:
32:73:9b:5d:b9:5d:a1:bb:f5:a6:91:42:0e:72:f7:
11:1f:5a:bc:4d:5c:79:dd:b5:01:36:3f:e7:96:29:
62:ba:14:1b:6d:a7:73:86:fa:af:3d:4f:a6:53:4f:
9f:14:5d:02:20:9d:07:bb:35:7f:2a:ab:75:c4:65:
54:d1:a0:57:a9:ae:01:9a:61:bc:d9:45:ee:72:aa:
5b:0c:7a:97:e1:e7:52:fa:44:39:67:6b:26:89:74:
b6:66:b8:41:8b:ce:86:a7:6e:54:75:f9:31:18:7e:
80:c1:6a:78:76:27:aa:9a:34:67:d0:d1:31:a5:fd:
a6:d5:66:b2:db:7c:03:0d:be:68:1b:92:47:8a:eb:
f0:63:99:b5:6b:9c:85:ca:d7:81:8a:4c:83:28:62:
fb:7a:96:5a:ff:a0:55:aa:ac:f2:09:5e:2e:a1:6f:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:91:8D:45:C0:97:65:E1:EC:B3:C7:E8:7A:D5:1E:D6:23:05:6A
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b7:63:a0:a3:37:6e:05:5e:cb:90:ac:67:54:fb:73:ea:30:
7f:70:a2:0f:7b:15:26:0b:94:2c:78:39:3d:b2:71:79:f3:59:
95:b8:bc:8b:18:05:24:3f:91:d7:69:9a:6c:ba:fc:bd:44:20:
62:b6:93:94:3e:be:ba:30:7b:7d:cc:94:d3:46:a2:a7:bc:e1:
ad:53:b7:22:50:fd:23:b7:fa:c0:aa:f6:6e:c2:39:d5:d4:7b:
d0:a6:0b:70:b7:e0:32:43:5b:d1:09:36:70:98:dc:4d:eb:85:
15:42:da:45:2a:a9:09:96:e3:a4:b4:1c:e9:c2:ac:b0:da:eb:
6b:ec:47:92:45:92:38:41:03:9b:3b:a1:cb:f0:57:f6:90:22:
b5:bb:c8:ad:61:37:7a:39:10:44:73:15:ab:19:72:88:93:71:
2b:7d:83:6b:03:33:2f:90:63:94:c8:82:1b:fb:87:8c:e6:77:
68:10:2b:c9:f9:e5:e6:51:bb:ea:27:40:95:77:de:48:53:0f:
71:76:8c:dc:f9:a6:92:ca:21:5f:72:cc:d6:be:e3:b1:0d:65:
41:63:62:fe:13:fc:cf:9e:06:3f:6f:1c:de:c4:5e:70:6a:7a:
e3:ae:5f:ce:20:c0:95:4e:35:c9:ba:61:ca:17:7b:17:4e:36:
26:0f:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:15 2025 by rpki-client