Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: LsyAQeOjEDQQQGbk89s5AFCTxTIgLY83RklaGm9TynU=
Subject key identifier: 3B:BE:4E:CA:56:B9:B0:8C:B5:2A:85:12:78:8A:09:98:F8:1F:90:F7
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 0197B77CD7627BF830D9E7D9B5DE249EE046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: NJNYUroAHgRhm/v87WFmnE+Ez0y2pfh9mcRKDPspAOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d7:62:7b:f8:30:d9:e7:d9:b5:de:24:9e:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=3bbe4eca56b9b08cb52a8512788a0998f81f90f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:71:03:6a:e1:cb:f5:04:ea:51:be:eb:6e:
30:61:87:05:9f:05:ca:77:08:af:7b:ea:58:e7:47:
f2:a1:4f:ab:02:7d:88:bd:7f:f0:52:b9:1d:14:2d:
9a:f7:c8:82:53:08:7e:54:b9:f6:ff:2d:53:8d:af:
2e:a6:25:c0:35:71:7a:27:84:de:21:44:64:40:9e:
78:d9:44:c6:0f:12:7b:45:e3:16:d6:5e:0b:05:59:
26:11:bc:4b:46:4a:6b:7a:a9:d0:10:d9:4a:20:fa:
7d:2f:8c:fb:25:c3:08:e7:23:0d:3a:9e:41:ff:48:
0f:e5:8e:ba:3d:f8:9c:4f:86:49:db:ff:a0:5a:c9:
9e:59:dd:a2:fb:cf:d3:5f:4b:31:8d:cb:b7:66:34:
dc:9d:ee:1e:68:fc:58:33:98:3e:5d:0d:63:dc:b3:
98:1b:fd:51:46:c6:14:e3:f1:a5:96:40:be:a4:45:
cf:8b:a2:40:ce:b3:8d:67:50:31:00:cb:2e:03:ab:
67:b4:27:4e:e9:56:2e:88:07:12:02:ae:38:34:16:
d2:52:92:8f:53:b3:f9:4f:2e:47:d3:84:39:4e:ce:
5f:04:29:8d:15:e2:b8:56:ed:1c:27:69:2c:21:b5:
8f:fc:8d:79:6f:6f:ff:db:1b:53:c0:15:06:23:af:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BE:4E:CA:56:B9:B0:8C:B5:2A:85:12:78:8A:09:98:F8:1F:90:F7
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:e9:38:32:c4:59:4b:11:94:51:50:cb:48:8f:4c:0f:f9:
94:66:a7:91:e8:5e:b9:6f:10:ff:cb:6a:f8:b0:d0:bd:60:fb:
2f:80:b6:95:8d:77:15:68:ee:a0:e5:30:30:4c:a7:e0:c7:95:
d6:9d:c8:f9:08:f6:68:8a:66:d0:41:78:95:6f:e0:38:4e:4b:
96:d3:eb:87:94:a7:58:86:c3:6f:4f:e1:1a:80:3d:60:0d:bc:
63:7a:b7:4a:9b:8d:26:2e:cb:08:53:b9:1a:a4:c8:61:26:c6:
b2:dd:5a:5d:32:28:05:3a:38:50:8f:2d:8e:65:04:d2:9a:3d:
94:6a:c6:48:88:f4:1d:30:f1:1e:15:ff:5a:54:a9:24:29:51:
9b:5f:b5:b3:a3:62:23:85:3b:25:6e:61:fc:b1:eb:d2:0a:d2:
46:33:47:da:a6:64:f6:6b:6c:ca:64:5d:34:96:81:14:1e:c5:
b0:45:33:ed:3c:5d:57:d8:5c:43:d8:5b:36:6d:9f:22:c7:7f:
74:cc:c7:e7:6e:96:e6:65:cd:df:45:9d:e9:55:93:d6:aa:b8:
50:59:95:dd:6d:0d:3a:3e:26:86:7d:30:30:ec:48:c6:f6:59:
4c:07:ab:ef:19:5f:e7:7f:33:85:b4:ec:9c:5b:cb:8b:68:c7:
f3:ee:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:26 2025 by rpki-client