Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier: I5f30H7SH79Lo2a0oYf4gNOX5/U81Qa6ACFhwGgiHV4=
Subject key identifier: 71:8B:98:06:0C:90:47:90:9A:16:88:C1:8A:F3:F2:73:DF:4A:58:FB
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer: /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial: 0197B6D7BA7839F9FB9DC93389158B9F0FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: NnQT7HhYd5GsoSzRpMhqXV2rGnwAB7aR90EpSuroKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ba:78:39:f9:fb:9d:c9:33:89:15:8b:9f:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=718b98060c9047909a1688c18af3f273df4a58fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:c8:02:a9:29:a1:17:f8:64:7b:f8:1b:ed:
2a:75:77:b5:ac:67:66:f8:cc:2b:6f:3b:2d:22:a7:
85:58:6b:38:8a:6a:85:eb:4e:22:df:66:e5:b4:a2:
66:47:6c:ae:c8:03:08:9a:d7:4a:c1:3c:10:4a:bd:
02:01:fd:4f:7e:2a:ba:87:e2:c4:e0:c3:9a:c8:77:
a2:86:12:6a:dd:de:ac:4a:e0:4f:61:97:8b:85:f8:
7e:b7:df:1d:64:fc:c7:b3:d3:d1:a3:d7:1e:f4:c8:
10:4f:d7:88:55:df:c6:dc:fb:1f:b9:aa:80:52:d4:
0f:16:68:18:f9:c6:a3:0a:39:a4:5d:19:38:39:0f:
45:f6:27:c8:06:a2:5b:6d:77:5a:ea:2d:18:31:dc:
76:14:df:99:ad:36:ad:1c:42:b8:e6:d6:c0:61:ec:
67:45:0d:ff:09:67:38:55:bb:c3:6b:e4:e2:c8:b4:
73:a0:6a:bf:4d:51:11:ba:b1:35:4c:a3:c6:8f:8b:
22:d2:e9:6d:95:1b:f8:cb:d0:f1:47:5f:a9:bf:d3:
0a:49:e9:c3:dc:cf:00:7b:15:df:77:86:07:aa:86:
36:6c:e4:61:43:67:0a:37:ef:f0:f6:da:dc:5d:e6:
c9:1b:21:ef:bc:28:25:5f:3b:4c:95:8d:f7:7f:06:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:98:06:0C:90:47:90:9A:16:88:C1:8A:F3:F2:73:DF:4A:58:FB
X509v3 Authority Key Identifier:
keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3d:d2:f9:2c:80:8a:85:bb:50:9d:94:d5:4d:83:03:81:29:
c2:3b:a5:f3:3e:03:ea:b7:14:32:d7:f4:bd:1a:de:1a:ee:a0:
d0:96:d8:60:a6:0d:e5:ca:2b:1a:a1:90:32:1a:b0:74:46:8c:
04:d3:85:88:99:ae:8f:f4:68:15:80:4b:4d:80:a1:89:b6:dc:
d7:fe:2f:e0:d1:9c:89:10:f6:60:7b:94:e3:60:17:c8:93:e2:
03:de:09:ff:35:75:74:30:81:21:5d:48:41:aa:e4:ae:a5:6f:
e6:a3:e3:3d:d9:13:35:f9:75:10:1f:42:ac:e9:63:97:c8:e0:
a2:65:e7:71:68:6c:07:50:ef:39:4f:8b:c2:0e:4b:c3:83:59:
42:7f:1e:2a:21:d7:e7:85:79:4f:55:cf:88:e4:57:02:88:16:
2e:65:5f:92:a8:b5:8f:b1:f4:f3:92:7e:fc:94:27:ae:06:2c:
72:c4:01:41:03:0e:49:00:ed:56:33:e4:4c:ba:7e:ac:05:e3:
93:d5:77:a5:7a:78:eb:21:70:11:42:0e:1b:4a:97:17:5f:6d:
2d:dd:e5:81:6f:46:ae:83:10:ad:e6:b8:a8:76:a6:65:35:71:
d4:f6:04:0e:7d:2b:e0:c6:9d:81:10:43:8d:13:c3:82:28:37:
8e:a5:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:32 2025 by rpki-client