Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: cRAccfFzAAvAyO2MU+HrRMDkJZHX7js+CaDhPN09MOc=
Subject key identifier: 17:8B:A3:15:62:96:0E:EF:6B:A7:64:86:44:ED:6D:90:22:7D:2F:89
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 0197B70E78035EE25D5D42A22D8915734333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: yuSZYkgUUhlEt3wJUFuizQNcl4PJ6Csqt7yxyPxrxzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:78:03:5e:e2:5d:5d:42:a2:2d:89:15:73:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=178ba31562960eef6ba7648644ed6d90227d2f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:c8:7f:02:cb:3d:a7:80:87:b5:32:ea:41:
da:af:c4:6f:20:67:2c:2c:5a:e9:1d:86:a7:04:16:
2f:ad:fd:98:06:4f:ea:f1:fb:df:90:c1:a2:bf:fd:
79:e6:bb:52:85:65:e0:7e:70:63:da:f6:d3:ce:cd:
0b:21:d0:78:c0:45:a6:95:4c:03:f4:38:97:a8:3c:
d3:31:16:e5:61:b3:57:93:cd:a5:e8:39:2b:e5:39:
50:37:f3:0c:5c:9a:04:5f:f0:60:0c:b2:31:61:80:
3a:86:95:4c:a8:85:37:79:a8:10:3f:be:40:cf:8e:
76:16:59:e5:5b:42:4c:ce:7c:b4:3f:6d:ea:a2:c9:
45:4a:ae:22:77:f6:39:af:20:07:22:f6:00:7f:8d:
1a:c1:0d:b0:d5:8c:95:17:a0:09:59:fd:66:97:03:
23:f7:ee:b9:b6:30:77:64:15:36:ef:4d:18:b0:3e:
5f:07:f9:46:cc:fa:39:1b:79:19:6a:e4:8e:98:29:
6d:5f:b7:3c:a1:70:b2:be:34:77:3d:9c:bc:f5:3a:
15:b4:ec:a7:1c:45:46:19:4e:b6:00:c1:eb:2b:97:
a3:ed:ee:f1:42:74:b1:f2:5b:41:e7:79:c8:36:3b:
2f:c1:84:07:c1:5a:9a:61:16:4e:fd:32:5c:c4:e1:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:A3:15:62:96:0E:EF:6B:A7:64:86:44:ED:6D:90:22:7D:2F:89
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:44:f3:13:85:e8:a1:10:7e:7a:28:8b:89:f7:11:8d:17:
30:1d:79:4c:38:88:14:6d:d3:74:b8:ac:70:d3:65:61:2e:54:
88:c4:a4:c2:37:f3:59:42:84:91:bd:d5:0e:9c:6c:a8:21:44:
92:57:8e:a2:1f:91:5f:14:10:86:80:8c:24:9c:aa:d8:96:03:
86:55:fe:e4:85:21:85:35:1d:54:06:73:18:0b:08:55:9d:67:
60:ca:a2:24:16:cd:b2:0e:77:db:c8:d7:01:5d:9f:64:40:a1:
95:6c:46:d8:d8:99:b3:81:ee:8c:99:55:fa:3e:50:43:7e:a6:
fd:19:0f:9f:fe:b7:3b:5f:a7:f1:92:6b:e6:1b:81:eb:b8:0e:
63:1a:40:65:64:9a:89:dd:14:6e:7e:c3:63:9d:0d:34:d7:a9:
bc:5f:3a:6f:a8:48:ce:77:61:94:d6:7f:d7:fb:37:b4:bb:9a:
c9:e7:34:ad:fc:b1:16:f6:5f:29:07:c5:41:30:45:32:bd:29:
e9:88:fd:ca:cc:d8:14:ec:43:01:3a:54:48:76:7f:00:4a:c2:
56:a8:e9:70:c4:58:8c:40:59:fd:f8:d5:b1:81:14:d8:0e:6e:
a4:bf:de:98:55:d4:59:53:59:f4:18:a2:1b:1f:9a:a7:dc:60:
a8:45:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:12 2025 by rpki-client