Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier: Gd7O0BX3AEGfdKFMShjB22E4IaPMCI7B1hBiv7mpCU8=
Subject key identifier: 92:F4:DC:D5:0E:39:C0:C3:94:8F:FE:48:D8:4F:44:05:46:35:F8:E6
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial: 0197B6A08C07EA9B865E6D82E2524A0E1611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number: 08A3
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: U1DMbxgml9YORbWFmVRwlGVh5/91UCy0uyZBMfays0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8c:07:ea:9b:86:5e:6d:82:e2:52:4a:0e:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=92f4dcd50e39c0c3948ffe48d84f44054635f8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:4d:ce:7c:5d:ae:14:bd:5e:6b:92:6d:79:
32:1d:d8:5b:b4:ff:7c:f6:1c:3d:ed:76:bd:bf:90:
f9:1d:ef:86:7b:1f:cf:04:79:34:9f:92:64:5f:6c:
16:b6:56:e9:c7:0b:41:6a:f2:a3:b5:40:ef:df:0b:
78:e4:bd:ed:1f:29:65:55:7f:c7:6b:75:79:47:53:
4a:60:1d:42:ca:d4:14:03:38:34:ed:f4:2f:89:f9:
4e:3b:22:63:94:75:4c:b4:60:08:a4:71:10:7e:af:
1f:14:1e:c9:da:7e:01:45:33:95:3c:c2:85:cf:f5:
ac:a0:be:ed:55:95:36:fd:2b:c7:33:47:72:c7:87:
b1:0d:3e:c6:43:35:bc:db:9f:13:1f:74:64:73:b2:
0d:54:80:6c:97:a4:94:31:ca:4d:81:36:73:4e:0f:
aa:7b:df:47:51:f2:67:bb:2f:fc:32:fb:04:50:97:
e9:4c:29:5c:77:e7:1e:90:d8:ba:aa:a6:4f:43:b5:
a8:a7:d7:7e:de:95:72:d3:58:de:1f:f7:64:58:1b:
af:b3:08:7c:98:d9:c9:89:af:2d:a4:dd:70:63:20:
6e:45:f1:fb:81:8b:8d:74:8f:fe:ab:ce:da:38:c1:
1f:31:bb:98:38:52:ce:9f:32:aa:65:66:a5:32:2d:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:DC:D5:0E:39:C0:C3:94:8F:FE:48:D8:4F:44:05:46:35:F8:E6
X509v3 Authority Key Identifier:
keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:62:92:6f:b6:12:b1:db:eb:cf:f1:f4:b9:c8:c1:c0:b1:53:
c7:35:c0:46:5f:0b:7d:37:67:68:b1:3b:60:e4:26:7e:b8:59:
34:5d:a5:17:8d:97:79:64:b6:bc:45:f9:c2:fb:ff:63:57:75:
2a:e5:ad:2b:65:32:1c:96:4a:f3:d2:dc:c0:e0:e0:61:5c:e6:
f3:5a:3b:21:67:c5:c7:ba:9e:60:4d:d3:4e:17:57:62:c7:fd:
c9:3f:ba:12:73:e8:e9:d8:7d:d5:d0:61:83:8f:75:34:94:be:
58:12:5c:17:c8:67:dd:57:9b:e7:7a:0c:39:20:42:45:df:0c:
96:27:1f:b9:81:ce:e4:d8:db:ef:e6:9b:df:64:ab:6c:42:08:
ed:2a:e9:35:bf:de:25:fc:58:30:70:cc:40:0b:24:c5:be:f1:
1f:28:d2:80:2f:64:a9:b5:d2:b3:c4:d2:b2:15:27:a3:27:ff:
fd:98:ad:ff:57:a3:90:c5:3c:c8:fa:86:7f:86:5e:ac:e6:f5:
01:74:d7:ec:fe:81:38:68:47:ac:28:d6:0e:e9:91:0c:ab:71:
36:bb:4b:5e:35:19:49:39:9e:a3:a7:01:5c:b4:38:63:1a:67:
c4:96:53:0a:31:37:e7:b3:e7:b3:b7:68:98:91:ce:62:fe:02:
46:e0:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:18 2025 by rpki-client