Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: Ham3BPyzmjSdbnMKD2T9cYmqkTamI2kxn/rwYr6W4cc=
Subject key identifier: 88:0E:89:D0:F9:70:68:42:BF:A3:2B:B9:8B:8F:8D:C5:90:17:E8:57
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 0197B70F03C20F9383986F9C67E72A4578E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: Ct/nQmYnFBG4t9ZbiNJ5yT4C9nfAj5AgKuI4I/MiZ9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:03:c2:0f:93:83:98:6f:9c:67:e7:2a:45:78:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=880e89d0f9706842bfa32bb98b8f8dc59017e857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:fc:d2:e9:6f:76:ce:c9:5f:62:d0:f2:76:
a3:59:a4:50:ca:fc:53:44:6a:3f:7e:8d:85:d4:47:
5f:99:eb:76:d1:e6:0b:9d:e8:82:a0:c8:09:9f:63:
53:d4:af:b5:fe:b7:22:1d:4f:40:34:3c:75:cb:54:
ef:bc:10:f2:bf:2a:a4:ea:0f:20:f2:e5:54:aa:36:
1a:5b:f6:f8:8a:a8:fa:02:d1:bd:2d:26:a5:be:41:
5d:eb:2b:27:18:82:be:d2:cb:f0:e2:0d:f7:83:89:
2f:5a:f6:f7:b6:4c:31:d1:f8:7c:d9:29:18:e8:8f:
12:d4:0a:70:b5:11:5c:5d:90:12:99:2b:fc:07:53:
a9:2b:42:61:b3:21:39:d9:1e:67:16:98:5e:8b:04:
9b:eb:da:60:0b:89:4c:72:65:9c:30:9d:e4:b6:d5:
2b:31:97:fa:5e:a6:11:13:d3:bc:4d:9b:0e:3f:95:
4a:66:6d:1e:8a:5c:d1:c4:2b:3e:99:1d:b5:41:11:
b1:e9:19:24:b1:fa:1e:3d:b4:7d:09:d1:39:ee:f0:
0a:d0:39:07:27:70:1c:6b:2e:3f:96:0b:54:1f:65:
f4:84:1b:5d:7e:f6:37:1e:a9:30:c0:24:40:44:5e:
cf:ed:80:78:60:e0:a0:7c:81:9d:0e:26:a1:a1:76:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:89:D0:F9:70:68:42:BF:A3:2B:B9:8B:8F:8D:C5:90:17:E8:57
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:aa:c0:f6:60:2d:e0:a1:f7:9e:65:bd:e9:f6:83:0d:30:4e:
b5:da:8d:86:df:b4:6b:3b:fe:13:50:7c:c6:d0:d1:8d:8b:c2:
db:c9:0f:4f:a9:e0:02:dc:47:c7:b9:d2:00:eb:5d:eb:69:0e:
ef:c7:e9:16:21:cd:5f:5a:1d:f0:94:41:bd:5d:1b:71:4e:87:
a7:77:50:8b:eb:44:72:e1:08:67:7a:d7:55:09:12:9a:f1:4e:
93:03:5c:79:ca:68:73:7c:08:a5:aa:58:43:07:35:8d:4c:0c:
d3:8d:67:b6:78:93:df:20:bf:0b:ab:e2:16:c5:0d:b7:5b:a2:
97:72:8e:3e:51:6f:cb:cf:f2:ce:07:f4:49:02:a8:00:23:27:
7a:31:44:82:f4:aa:11:bd:de:ac:04:b4:f5:0a:c3:b5:66:c7:
43:44:38:ba:dd:17:16:64:09:b5:d9:f9:22:c9:77:40:26:a1:
74:5b:94:1f:84:61:0e:21:18:a2:1a:aa:ff:17:b8:08:56:03:
c5:f3:c5:c5:76:16:76:3e:d1:f2:14:29:42:97:a2:bb:18:b9:
d5:bc:9e:d4:3a:98:54:18:d2:10:41:91:1a:fb:7c:ce:7d:98:
30:ec:60:3d:08:93:df:8d:e2:15:85:2f:25:c7:2d:a5:e8:69:
3a:ab:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:55 2025 by rpki-client