Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File: JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier: VL3CSz7VNLOwRUw7EIOOkGuxu3/WV/NF6dysyUwKc8s=
Subject key identifier: 84:0E:A4:2E:53:83:40:CC:19:0B:ED:38:8F:EB:B6:69:FB:47:3E:E1
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer: /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial: 0197B7B379857A76EC005D166009EEF17B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number: 06B8
Signing time: Sat 28 Jun 2025 18:01:21 +0000
Manifest this update: Sat 28 Jun 2025 18:01:21 +0000
Manifest next update: Sun 29 Jun 2025 18:01:21 +0000
Files and hashes: 1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: XK29PjIbGs666kXBdzJkUsJA4D1eLOC6ozAKQdb9/EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:79:85:7a:76:ec:00:5d:16:60:09:ee:f1:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Validity
Not Before: Jun 28 18:01:21 2025 GMT
Not After : Jun 29 18:01:21 2025 GMT
Subject: CN=840ea42e538340cc190bed388febb669fb473ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:83:53:7c:cf:20:da:2e:81:3d:fd:71:dc:
2e:e6:16:bc:e8:07:f7:6e:84:2b:4b:6a:c3:6a:bd:
df:00:b9:a4:7f:81:90:b0:4f:21:69:2d:da:a8:be:
3e:2e:89:f5:78:22:8e:97:17:ee:26:91:96:1d:62:
36:f8:ad:96:c4:ba:f0:5e:c3:15:e2:52:9a:55:ea:
fa:fb:4b:ba:96:58:06:21:fc:17:01:c3:1e:4b:24:
10:de:20:53:5f:a7:62:72:4a:75:fa:7f:1a:84:10:
bf:8a:d3:57:88:8a:63:72:9d:08:4e:f0:3b:90:05:
6e:6f:7a:4d:ff:00:9c:39:7b:d4:84:be:ee:09:1b:
45:20:4f:9a:39:43:a0:5a:14:52:03:5c:cb:0b:48:
2d:6f:a8:82:e2:29:57:5c:7c:67:18:b3:a0:79:b5:
b1:06:57:f7:a0:b8:8c:e1:a3:05:f7:ea:ea:64:4d:
ae:53:2a:3d:e0:ae:b0:df:8b:4f:bc:75:b0:ae:69:
4e:50:8f:c7:e0:30:f6:b4:29:c2:8a:4d:c4:5b:ad:
41:e2:b7:91:65:b5:ab:cf:59:7a:d0:88:4d:15:7d:
dd:32:c6:09:8e:05:8a:0d:30:1a:15:ae:4d:f4:45:
a9:42:2d:52:f0:12:3d:a1:19:fd:c5:42:f8:41:fe:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:A4:2E:53:83:40:CC:19:0B:ED:38:8F:EB:B6:69:FB:47:3E:E1
X509v3 Authority Key Identifier:
keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ed:06:31:f9:d8:d6:9d:81:6c:a3:91:8e:02:e7:53:a6:0d:
c6:0d:8b:26:d1:31:04:a9:de:72:06:c3:06:d7:a2:f7:a4:65:
4b:df:cb:f1:2c:c4:5d:2c:36:b3:01:5d:4f:39:da:57:f7:c6:
b0:db:97:be:3f:2a:e5:85:36:73:33:88:95:5a:67:78:82:03:
23:42:5c:06:8f:b5:f0:51:92:62:be:89:d9:08:0e:08:97:40:
ce:9c:3d:2a:66:2d:c7:50:2c:e5:8b:0d:18:18:18:67:cd:15:
23:cb:46:48:25:06:8e:f6:6b:05:19:0c:fb:07:f9:f8:49:b7:
e5:44:ab:ca:23:04:31:94:d2:54:7e:50:ea:b8:a7:36:90:a6:
ac:45:66:59:c4:d0:40:69:1f:ee:d8:91:38:d1:cf:bf:a9:d3:
8f:b0:57:15:d0:a7:96:41:3d:3d:25:96:49:58:11:be:03:c9:
4f:6e:85:c2:67:7d:33:82:bf:36:3d:f4:66:4b:80:9e:d9:43:
3f:24:10:6b:96:5b:6d:72:46:d3:42:51:78:ec:d9:76:41:2e:
dd:2f:ba:e4:68:ff:f8:28:89:e9:29:db:02:a0:9f:d8:e1:34:
c5:0b:ce:61:3c:c4:25:20:b6:96:3c:8a:64:16:7c:0c:b3:12:
28:b7:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:04 2025 by rpki-client