Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: Le2zufkCSWEBtOmag8p7HvZ5bZJOeyWeeenFC9lR8/8=
Subject key identifier: AC:74:C8:95:30:2C:D6:16:2B:0B:36:40:1A:AA:E3:99:63:FA:E1:7F
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 0197B96AEAF5F6271F0A5F43DB85AF89953C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 02:01:21 +0000
Manifest this update: Sun 29 Jun 2025 02:01:21 +0000
Manifest next update: Mon 30 Jun 2025 02:01:21 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: gQRLVpGrFOg83/HoLGfWeBdBbEmB0OQzjRHNre7xxyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ea:f5:f6:27:1f:0a:5f:43:db:85:af:89:95:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Jun 29 02:01:21 2025 GMT
Not After : Jun 30 02:01:21 2025 GMT
Subject: CN=ac74c895302cd6162b0b36401aaae39963fae17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:67:d0:11:08:0c:15:60:35:0d:58:f5:6c:
90:26:d1:25:ac:ba:64:53:4d:3f:ee:d0:79:5a:44:
71:eb:39:07:05:27:69:b2:54:5c:a8:b5:c6:8e:5e:
c2:5a:95:12:08:ca:15:cb:13:fc:62:c6:b3:d9:92:
fd:f0:29:01:22:47:fc:d6:a5:e8:7d:e9:54:9f:f4:
7a:7d:5d:32:e3:fe:98:eb:25:f9:70:7c:67:38:04:
c2:e4:fa:ce:3c:c4:90:2a:54:3c:9c:66:0e:88:b0:
72:49:d9:1e:9c:9f:dc:9d:24:82:bf:44:48:2a:2d:
11:b6:a0:b5:8e:62:0b:01:04:98:55:9a:8b:0f:11:
69:a3:21:34:6e:c1:d5:a3:06:cc:bb:e8:dc:f2:ae:
e0:8e:ec:1d:a8:5b:9a:9e:7b:de:6b:7e:76:4b:ae:
12:91:e1:5f:12:15:63:7d:a6:4d:e3:b6:a2:e9:cd:
74:0c:5e:6a:c8:12:cb:90:7b:7e:88:b0:7b:d8:6f:
85:15:b1:95:d1:1d:11:40:a7:fd:a1:fa:1b:5e:45:
56:f7:1c:63:1b:d7:99:00:ea:8a:5c:c0:91:5a:5e:
af:18:a3:7f:44:a4:44:7d:42:18:78:01:f3:4e:07:
2e:51:45:2a:44:60:d5:82:d1:b3:d0:a8:ac:a9:97:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:C8:95:30:2C:D6:16:2B:0B:36:40:1A:AA:E3:99:63:FA:E1:7F
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:15:43:1d:eb:51:29:48:63:b1:6c:fb:fa:e5:c3:b4:74:d3:
01:8a:db:65:4e:65:64:eb:ec:b0:55:ba:a3:91:7a:1a:d3:ee:
21:85:5d:52:3d:a7:8d:a3:3c:db:39:b9:eb:61:18:a8:ac:e0:
05:40:da:8f:31:b7:a6:b1:8d:e0:9b:2d:f2:18:6b:70:0b:2e:
58:5f:ef:ed:7b:ea:ee:df:9c:16:05:d3:bb:99:90:f1:4d:5c:
07:7a:e9:53:d8:3a:b3:7d:4c:e3:4e:77:a5:0e:a2:3f:0a:c8:
a1:cc:ba:0f:36:20:a6:34:fd:7b:f2:9e:31:d8:7e:18:7f:c1:
ae:01:69:81:5b:a9:a3:bf:67:85:b1:b7:f7:59:97:2f:57:34:
aa:46:56:a8:75:ed:40:78:e9:e3:d3:e2:bc:b1:40:4d:09:79:
df:4f:52:36:e5:1e:93:a9:8e:85:d6:24:34:9e:44:5c:b0:53:
f7:14:1c:b2:f5:b6:4b:53:ab:c1:ad:2c:37:84:df:11:57:66:
97:18:d3:e1:67:8c:5a:75:9c:22:1f:fa:e0:df:02:3f:6f:56:
c7:d4:f3:7b:46:8d:a4:06:59:03:02:d3:ee:94:95:2c:a1:f3:
74:ed:89:da:c7:9a:b9:0c:7a:72:46:71:37:b4:af:58:1a:e7:
23:00:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:34:12 2025 by rpki-client