Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: QPH8Ug0EdPqNtbpP9BE9I8tWuN76LUmy8BBOcKWtQAE=
Subject key identifier: 90:3E:D1:B8:EB:99:A7:C8:40:B0:C3:14:5A:B6:47:81:B9:D3:69:02
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 0197B88F5748308E6EEA3207B9207D20E3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:31 +0000
Manifest this update: Sat 28 Jun 2025 22:01:31 +0000
Manifest next update: Sun 29 Jun 2025 22:01:31 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: F1S91LwKO4s0EDJWwMhPU6PdOKJgG78KL6mS+yTjNSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:57:48:30:8e:6e:ea:32:07:b9:20:7d:20:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Jun 28 22:01:31 2025 GMT
Not After : Jun 29 22:01:31 2025 GMT
Subject: CN=903ed1b8eb99a7c840b0c3145ab64781b9d36902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:5d:d9:2b:46:64:98:46:ca:4e:a3:fb:a1:
3f:90:66:cc:14:6d:32:18:44:16:14:6c:ac:b6:83:
cf:8d:ab:ae:87:cb:8c:bb:16:81:32:ae:a6:2e:2a:
03:e5:27:a8:20:21:65:e4:3e:a6:49:4b:ac:aa:75:
2f:83:0f:36:63:d8:fb:12:b5:28:cc:b6:9d:76:e0:
a4:5c:56:ca:37:ac:23:a9:6c:5c:0b:4a:70:22:be:
0b:25:90:09:17:b5:5c:f8:0a:e8:35:b9:d2:5b:27:
16:2f:3f:4a:5b:c0:8e:0d:80:cf:ee:5b:70:65:f2:
16:06:69:16:05:b9:55:b6:bb:7c:4b:84:a9:a4:00:
37:e7:a8:19:67:f1:07:c4:45:89:a5:78:c1:a3:0b:
c6:4b:b8:56:ca:de:98:5b:d8:34:bf:40:92:1c:4c:
a1:7f:b7:af:41:94:7a:6c:e6:23:6b:ae:da:f5:54:
ee:fd:a7:c2:b5:e3:89:1f:b4:b4:44:0c:a1:4f:b1:
87:f6:21:23:33:75:4d:b1:bc:03:38:b7:2d:81:86:
06:69:ab:79:dc:6f:ea:4b:39:a1:cd:e3:6a:fa:3b:
aa:06:c6:fe:2b:df:91:70:d9:c0:98:a7:f8:a0:bb:
88:16:a6:ef:5b:17:f7:06:c6:61:4d:e7:79:5a:1d:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:D1:B8:EB:99:A7:C8:40:B0:C3:14:5A:B6:47:81:B9:D3:69:02
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a3:cd:d4:07:5e:a3:db:f2:b1:f4:da:2c:56:75:a6:2e:bd:
19:f3:a0:0d:32:89:09:c9:a4:fa:f7:5b:65:ef:4d:b9:4c:0d:
3e:5a:ac:ef:be:0e:a0:71:03:36:c0:b5:cf:7f:15:83:ab:9d:
70:99:47:19:ad:d2:7a:11:21:bf:09:02:5f:8b:ff:d3:8f:78:
da:71:7e:bf:dc:2f:32:d2:66:9c:37:39:95:4a:e1:aa:d3:cd:
5c:86:3f:9f:fc:d5:6c:49:40:98:b8:3a:3d:c7:64:49:21:94:
ea:1b:cd:10:82:31:62:70:5f:a8:8b:a6:5d:c7:8d:3f:de:6e:
47:48:f2:66:7f:e4:ba:80:a7:e1:a4:a6:95:8a:bc:91:1a:88:
46:48:99:ac:2f:34:e2:af:68:1c:2e:da:70:71:25:43:88:5b:
51:17:36:e4:72:5d:eb:c2:1a:0e:8c:c8:a3:88:e6:8a:89:a0:
6b:2a:ea:d8:d8:eb:0b:e0:80:61:89:f5:2b:c6:38:a4:c4:b4:
9b:e4:be:13:b7:84:2c:6c:26:c7:df:66:3d:ae:d3:a3:27:ea:
c9:17:ba:0b:73:f4:0b:7b:8c:e1:17:56:ad:28:44:5a:e7:17:
03:56:c9:91:af:eb:41:1e:0b:e3:5c:5d:76:25:be:89:15:db:
d5:02:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:59 2025 by rpki-client