Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: 3n5ErBuC5T0OJlsEZMa6XeVIqG7dUKk0HN14wZaT66M=
Subject key identifier: D0:35:1C:56:C4:6D:52:1F:E2:2C:8B:1D:D1:B7:ED:5F:34:DE:3E:2F
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 0197B6A0CDA465E47C81D773DF9093B23BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 0476
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: s9WgkdGKxxeBBjb59XjApL4TapbIGlO1kAv+dyUrUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cd:a4:65:e4:7c:81:d7:73:df:90:93:b2:3b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=d0351c56c46d521fe22c8b1dd1b7ed5f34de3e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:3e:28:6d:7c:ad:41:30:00:17:57:38:23:
24:c1:c3:fa:2b:d2:76:6e:90:6c:bd:3a:ed:aa:6e:
30:68:89:13:d9:1e:66:41:a4:61:78:03:60:d1:86:
ff:33:2f:e5:be:e7:42:e9:59:26:94:f4:49:87:f0:
a8:7a:b8:3f:32:b6:39:84:55:96:21:9f:f5:7d:de:
2f:02:e9:0c:1f:e0:6f:f5:49:fb:17:2e:24:f6:92:
74:b9:c3:bf:38:97:1b:da:4e:00:6b:3c:9b:e1:7f:
48:d0:61:f5:71:fe:7e:ba:cf:5b:bb:6f:78:4d:58:
d6:6f:96:64:65:f6:43:0e:c7:e9:52:ef:ec:fb:18:
89:87:14:02:2c:aa:ac:b7:5d:cd:69:0f:a6:3e:1d:
4f:ee:20:06:b1:a9:da:a7:d7:bf:52:ed:6d:e2:21:
19:3d:44:7a:9b:fa:cc:46:c9:de:c1:88:61:09:d8:
ec:88:34:c2:f5:8d:03:84:05:a0:f6:3d:b3:ae:15:
c7:f4:42:7a:12:bb:4a:0a:8a:6b:f3:dc:cf:78:f6:
71:36:94:ee:80:d5:d3:09:d3:e2:d2:b4:ba:a1:54:
28:50:8f:b5:03:dd:8a:6a:2d:45:74:fa:4c:1e:56:
62:b5:85:ff:eb:53:7c:a0:68:f1:3a:f8:56:f2:98:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:1C:56:C4:6D:52:1F:E2:2C:8B:1D:D1:B7:ED:5F:34:DE:3E:2F
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:e9:2b:75:4f:19:58:97:4d:f8:89:c4:0d:80:9f:e9:2d:
f7:6d:6f:70:0f:f9:2d:1b:20:57:a6:02:d0:d9:56:91:4b:6c:
c7:28:e9:a2:0a:09:ae:21:8b:07:44:25:2d:b0:f5:2c:da:15:
f3:30:73:97:74:7e:7a:af:4e:7b:1c:e9:7d:78:8f:88:ff:38:
49:f1:98:fd:b5:a8:3f:b6:83:3e:58:79:b5:bb:b7:9e:a0:58:
3a:9c:d1:bf:12:4d:83:00:b8:e7:a7:82:30:31:c0:58:16:71:
90:d2:47:e8:f4:ca:36:41:7d:74:4e:1e:bc:c8:11:46:38:64:
e9:f3:00:c0:52:1f:e0:6c:d4:d8:b1:b6:bb:52:2f:66:0d:fe:
19:34:e8:35:3f:30:c7:3c:6e:47:45:2a:ab:62:3e:a7:8d:b1:
97:97:06:48:20:e5:cf:e3:92:c6:b1:50:19:29:e6:72:44:37:
33:6c:86:3d:1b:3b:84:92:ec:69:99:4a:ad:23:b9:66:d3:f3:
14:59:08:2d:84:4c:9e:4d:f6:22:1f:05:77:97:2b:a6:7c:f2:
3f:66:ea:d6:51:e3:8f:2b:65:f3:40:19:00:58:93:48:26:7a:
76:41:65:f9:a7:26:2f:74:e7:e5:e3:58:b8:3d:53:c2:a5:73:
35:df:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:19 2025 by rpki-client