Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: JXmzEws7eC45oqkB92hZ7X71MPTabeMHF5VeHQF+/KQ=
Subject key identifier: 5D:C1:2E:F2:52:DA:F6:D9:2A:E6:EF:7D:E2:27:86:84:8E:C6:75:12
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 0197C9F16A1734EF45B1D2E5F89D3EACADB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 0D9C
Signing time: Wed 02 Jul 2025 07:02:10 +0000
Manifest this update: Wed 02 Jul 2025 07:02:10 +0000
Manifest next update: Thu 03 Jul 2025 07:02:10 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: eRDODQWkbSQxK5qgXtjk392aPaIuWBgLQp1xLRwPmzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:6a:17:34:ef:45:b1:d2:e5:f8:9d:3e:ac:ad:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Jul 2 07:02:10 2025 GMT
Not After : Jul 3 07:02:10 2025 GMT
Subject: CN=5dc12ef252daf6d92ae6ef7de22786848ec67512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:13:87:5f:a1:2d:93:6a:62:6d:13:79:f1:
5a:27:9f:37:92:a2:6e:d1:6c:ae:a3:f1:9a:0c:63:
ba:3b:2c:62:4b:99:37:a7:50:4a:00:1f:57:77:bf:
d8:37:66:7e:43:cb:a2:0e:71:92:52:9e:a8:79:01:
ff:99:13:23:54:67:13:59:8e:0f:b2:26:3b:cf:0e:
19:79:0c:11:48:65:d4:27:89:df:d1:34:87:f0:13:
3a:3f:23:27:68:37:be:eb:fb:76:dd:81:45:a1:8c:
48:40:31:e8:80:68:4b:55:a5:c1:d3:f7:05:ee:0b:
b5:59:93:ca:ff:aa:06:5e:1e:f3:c2:66:c4:45:ee:
45:f8:39:25:e8:a0:48:58:25:89:5b:46:bc:0e:e6:
d2:13:5e:9a:ac:ca:e7:1c:54:eb:0f:f5:7b:ff:78:
02:68:ca:65:23:13:93:9a:b8:a7:21:5d:7f:ed:61:
92:e9:21:ea:06:d0:c6:97:48:83:5c:67:12:b5:09:
2a:8e:ce:ce:18:3c:37:d3:8c:6c:1a:c5:d7:c3:9a:
a6:f3:99:05:df:e9:7e:5f:6b:f9:05:2a:92:9d:ce:
3e:f0:6e:bb:b7:3b:d7:d0:fd:fa:b5:a5:1e:c7:3a:
37:70:56:ff:d1:24:34:6d:ed:f6:77:a0:40:ff:09:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:2E:F2:52:DA:F6:D9:2A:E6:EF:7D:E2:27:86:84:8E:C6:75:12
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:79:3a:45:b0:30:3a:e4:b7:cd:61:d6:25:81:f4:d2:d6:8f:
0c:2c:ed:5e:6b:34:ac:05:27:3f:b1:c6:e4:0d:18:70:3b:cc:
15:c5:6e:c8:46:38:37:11:a9:19:2b:a7:f3:b8:1c:05:23:3a:
af:ff:f0:9f:dc:94:a8:da:8f:41:6c:ac:a3:c7:3a:27:2f:7f:
dd:7e:4c:6b:ac:97:fd:00:d5:f6:22:5a:c6:52:68:1f:83:33:
6f:76:67:3c:c3:27:1d:57:bb:3e:dc:62:fe:14:da:8b:f8:9a:
c6:a8:8e:c0:26:07:dc:4b:84:88:2b:83:0b:10:2d:e6:62:02:
26:35:b4:dd:24:29:8d:3d:dd:56:ba:5a:b7:bf:cd:f5:ec:d9:
b9:e2:e5:ce:cb:e5:0f:46:c9:ee:4e:8f:52:73:1d:79:c4:9e:
65:81:ca:75:a9:0a:dd:e8:90:e3:66:00:90:26:25:02:64:33:
d0:aa:e8:ff:d7:77:d4:d9:a8:70:1d:a8:b0:20:13:50:04:e1:
aa:9e:5d:2d:a2:4e:37:cc:30:63:d3:2c:e7:1b:b5:31:fb:07:
32:bd:17:30:d7:e4:21:b7:e8:e1:6f:53:15:4b:11:5f:f3:6f:
43:17:ce:bb:bf:36:5e:bb:a0:65:2e:a5:4d:65:f4:3b:2d:e3:
57:18:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:46:26 2025 by rpki-client