Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: +R/9DccLfY4n+iMI5j8v26vBpK98U15JRrglBsT3wLQ=
Subject key identifier: 7C:A8:A2:53:CF:7F:37:73:A7:B9:7D:AA:F2:19:06:3F:9B:7A:7C:61
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 0197B933C0E99163C70044EC1BBDB423122E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 01:01:05 +0000
Manifest this update: Sun 29 Jun 2025 01:01:05 +0000
Manifest next update: Mon 30 Jun 2025 01:01:05 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: 44GeWHigSZ/kZj67upce8rLYDxMg6t1TQOrng9rLycs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c0:e9:91:63:c7:00:44:ec:1b:bd:b4:23:12:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Jun 29 01:01:05 2025 GMT
Not After : Jun 30 01:01:05 2025 GMT
Subject: CN=7ca8a253cf7f3773a7b97daaf219063f9b7a7c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dc:15:fc:ea:65:d2:f5:e6:d5:41:3e:91:5c:
61:8b:f3:db:a1:85:67:ba:47:3d:32:3f:fe:04:cc:
81:62:2c:fa:cd:42:06:80:7f:e3:80:60:14:4f:5f:
e9:20:53:03:4b:9a:d0:b2:c7:82:28:1c:d9:59:a7:
ff:9e:1f:5e:6e:f7:7e:c1:28:a4:5a:2b:5b:ae:cc:
39:e2:dc:53:60:17:27:d4:1b:fc:3e:62:f5:5c:b6:
12:3a:54:8f:87:fa:90:5b:12:34:3f:b4:a6:e1:8f:
f1:9b:25:a1:e2:7e:44:b8:8a:64:2f:9b:6e:ae:b1:
08:3e:29:a6:ee:bb:60:9c:af:e7:52:1b:b1:9c:54:
c0:08:ef:9d:c4:d5:cd:60:e5:e6:f4:09:57:0e:e1:
72:8a:f4:ce:a0:38:87:ef:d8:4d:9f:1e:d6:9b:7f:
6c:f1:83:c9:7a:2e:1e:72:6d:30:e5:42:a7:cf:6b:
86:aa:91:f2:1c:bb:15:a1:db:22:a8:4f:b6:f3:e8:
2c:77:5b:e4:5f:b3:e3:0c:5a:f0:ee:4f:81:0d:dc:
20:ca:13:fd:eb:de:f1:fe:aa:db:c6:19:24:5d:1b:
3a:7e:b0:8b:63:8a:f1:a8:a4:06:03:83:ed:f4:c9:
bb:31:18:db:e5:8f:8b:3b:d7:fa:76:cd:69:79:c9:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:A2:53:CF:7F:37:73:A7:B9:7D:AA:F2:19:06:3F:9B:7A:7C:61
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:a7:e6:4f:a8:b2:67:85:c7:51:61:ca:7f:68:75:ea:09:
2f:8a:6f:57:56:e1:95:48:96:16:9d:eb:5a:6b:2a:02:33:39:
a2:15:e0:ff:92:6b:74:c8:ec:97:8b:32:9e:16:78:0f:2b:f3:
d3:d2:84:88:9d:84:f9:3e:e8:0c:4a:08:d1:8e:95:95:2d:6d:
c5:66:f0:6e:98:72:2a:06:75:16:a7:fd:4a:29:9c:ad:89:e1:
87:c3:00:34:1d:fc:96:44:f6:bb:57:d7:34:11:16:7a:00:df:
20:6e:3c:fc:fd:15:53:06:ba:ee:b3:fd:2f:59:72:01:d9:8f:
1c:a0:0e:f8:b7:43:c6:af:b8:16:0c:36:e0:d8:45:a8:d4:f4:
5a:b4:7a:9f:74:3b:1a:36:38:b8:9a:03:d1:9f:4e:3e:b6:58:
cc:2a:6b:a5:9b:0c:4c:30:92:bd:62:fb:73:90:17:13:f7:c2:
b6:3e:97:41:d8:8a:99:5e:21:7c:42:20:be:01:b8:e6:76:f6:
f7:f9:e4:41:12:59:ce:35:84:7f:f4:e3:66:f2:ee:a0:d3:82:
f0:6c:ea:6f:e4:41:d5:65:f4:39:d0:3f:44:01:1c:20:84:0e:
1e:3f:db:49:c9:ae:ee:a6:1c:2a:58:bb:44:37:d6:da:59:f1:
37:84:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:28:27 2025 by rpki-client