Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier: dJXydOkiXWucIR4h0kcVO07KjKVG8r51ww9H8d96K3o=
Subject key identifier: DE:7C:0A:47:85:F4:77:11:60:2C:17:42:FC:3F:5B:C9:FC:F6:E5:54
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial: 0197B6D72B7CC430A62BF9C460543A7907EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number: 04ED
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: UfGJlahR8TWfB4dAiwFUHKi3bgNEFoxBA0ovtuauCQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2b:7c:c4:30:a6:2b:f9:c4:60:54:3a:79:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=de7c0a4785f47711602c1742fc3f5bc9fcf6e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:e7:9e:8d:d3:ef:b0:85:21:3b:21:a8:e6:
4e:87:04:a9:1b:4a:64:c4:01:db:38:98:b5:4f:c2:
c4:f4:3e:35:f9:55:5a:bb:22:33:f0:b0:9c:8b:bb:
29:42:41:63:8d:4d:31:0a:9d:7e:e2:9e:50:da:71:
c2:2b:05:47:ff:2e:1a:a8:27:fe:8f:54:db:e9:8a:
09:9c:cc:09:d9:58:12:7b:14:f5:a5:67:d2:9a:d5:
97:58:fa:a3:34:17:ff:59:55:97:e7:eb:6d:1b:51:
8e:1d:b0:2c:48:f2:29:42:9d:bb:a9:85:01:7b:29:
62:c3:69:82:0a:a3:01:91:ec:8e:bf:ed:4f:3b:f6:
5e:60:25:6f:0c:b9:28:10:5d:8d:ef:88:13:34:eb:
00:15:59:30:26:99:1a:27:41:d4:0d:31:30:19:5e:
df:56:38:cc:db:5b:a0:06:b9:b0:0f:4d:ea:99:62:
e5:c2:63:ee:18:be:b5:4d:3d:0f:b6:01:e8:99:09:
1b:f7:9a:f6:b5:21:2f:70:ef:57:d1:48:85:05:61:
43:cf:06:7e:0b:5d:50:ba:ab:9e:86:ad:35:6b:75:
8c:3d:52:3b:81:9b:9c:cd:b7:49:26:39:fd:93:3a:
80:1e:29:03:49:89:ec:22:db:61:53:fd:91:b9:3f:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:0A:47:85:F4:77:11:60:2C:17:42:FC:3F:5B:C9:FC:F6:E5:54
X509v3 Authority Key Identifier:
keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:db:b5:bb:47:6c:ce:29:11:e8:52:08:8b:70:4d:3e:29:bd:
80:29:34:f0:f8:0e:8c:9c:1a:a0:cd:24:3a:58:fb:d4:00:6d:
44:45:dd:57:66:b9:3b:75:a6:39:36:16:d3:3f:b4:d5:3a:af:
5b:2d:2e:ba:b4:ea:59:22:bc:f0:d4:07:fd:88:9e:5a:cb:4c:
12:7d:b7:08:36:3d:72:a0:69:5d:92:5f:34:64:8d:82:5d:57:
a6:3e:1c:9c:d6:c0:8a:04:d2:10:44:a4:ed:8f:ab:9e:c0:1f:
85:e4:14:b8:85:82:f9:37:2a:77:db:d0:33:8b:9f:5e:f4:58:
ff:8f:28:3f:a4:d9:d9:75:ab:7b:a2:16:a6:8a:ca:47:99:ad:
b3:0c:fb:41:75:5c:19:1d:ef:3e:6f:0c:ef:9a:51:d3:d1:28:
cf:0c:21:72:cb:1a:6d:aa:8a:78:2e:ed:bc:ad:61:21:be:00:
92:94:a3:de:dd:ca:3d:74:97:98:ac:e1:86:dc:27:8f:3b:eb:
3b:a3:7c:b7:8f:7f:0b:a3:b7:1f:ff:70:9e:bb:9f:e9:08:10:
1c:79:2c:f6:b6:2d:e4:9c:99:3b:37:f1:d5:e9:70:07:d6:14:
93:55:a9:a7:fd:c5:52:c6:86:b0:16:48:72:52:22:78:af:9e:
e7:bb:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:29 2025 by rpki-client