Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
File: JfgKOI5PDiZBTOq-q036hBkdgUA.mft (raw, json)
Hash identifier: Hvm9N9dw32x0x+9F2EMd3SPh3BU7/I7ajC5566cqlgA=
Subject key identifier: 72:D5:EC:1E:F9:BE:A1:5B:65:C1:74:8B:76:79:45:3A:EE:F6:52:D1
Authority key identifier: 25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
Certificate issuer: /CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Certificate serial: 0197B70F2997A0AE6DD81B687263216AB23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
Manifest number: 14BD
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: JfgKOI5PDiZBTOq-q036hBkdgUA.crl (hash: dELKVYF2YL/e1Sx4GEQzMOmtO/zggMT+dVVje0pA/bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:29:97:a0:ae:6d:d8:1b:68:72:63:21:6a:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=72d5ec1ef9bea15b65c1748b7679453aeef652d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:e8:75:3b:cb:0e:9f:e7:80:02:7c:84:66:
84:60:12:e0:08:f9:ed:56:84:0a:33:f7:a5:5f:b3:
44:88:04:09:af:db:4a:01:96:95:e2:d1:c1:d9:28:
21:ee:c7:0e:24:45:0b:28:be:a8:3b:b9:94:34:75:
99:2a:69:51:c1:de:5a:e1:6a:7a:1f:e6:7e:c0:2c:
a3:ac:b5:f0:f8:6b:5d:39:fe:1a:8e:aa:54:a6:07:
8c:02:ba:43:93:48:b8:83:01:b7:89:d9:c9:9c:05:
79:ef:d0:a9:4a:14:e7:fc:47:54:e3:4a:e2:ea:4e:
f9:9e:d4:99:24:0f:e3:dd:c6:cf:cb:e6:30:b2:37:
3c:00:ab:b3:b1:b0:e4:89:bf:7b:c0:9c:f3:5a:6e:
11:50:3d:10:c6:6a:67:dc:67:a8:38:07:48:88:04:
67:5c:b9:d0:0a:08:d6:54:c6:8e:c0:f5:b2:16:c1:
e5:69:17:40:8d:ea:63:1d:41:8e:ef:b7:d4:a0:8e:
8e:3b:40:49:a6:6d:04:32:03:1d:73:33:b7:9a:7e:
d4:df:4d:73:7a:5f:50:ca:51:c3:01:9f:36:6e:9d:
c5:f9:8e:1a:29:b9:0e:b6:38:41:18:4c:5d:c9:5c:
5c:c8:41:85:9d:5f:63:e0:10:6e:62:fb:14:7a:7d:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:EC:1E:F9:BE:A1:5B:65:C1:74:8B:76:79:45:3A:EE:F6:52:D1
X509v3 Authority Key Identifier:
keyid:25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:6b:49:77:a2:da:c9:13:13:3d:af:1d:bc:a7:b3:9d:c0:
f1:87:3b:c6:c4:9a:7c:0b:7b:85:45:46:4f:72:ab:50:3f:fa:
4a:3f:b0:fb:ab:03:66:91:17:6c:ae:46:78:fb:71:a7:2e:32:
64:17:dc:44:56:dc:c8:de:c0:e6:ac:29:be:98:43:43:da:2e:
e8:fa:68:50:39:1f:15:49:3e:fd:14:7b:d6:27:35:57:44:e8:
86:a4:88:92:e2:2b:61:80:33:f7:af:45:96:b1:b7:ef:14:99:
26:33:17:f0:dc:d0:ba:09:5e:64:46:d2:29:8f:98:b2:bc:25:
b6:bd:60:6f:83:2f:3a:b4:7a:bd:58:4b:89:52:4f:fd:93:f6:
fe:ae:5e:46:16:aa:e4:c3:b9:86:23:62:1d:87:02:b3:8d:ee:
f2:94:ce:06:05:ed:00:e4:1a:43:58:63:a7:40:e2:e0:36:26:
9e:0c:54:08:09:54:b2:2a:dc:86:e4:30:6c:93:4b:31:1a:77:
06:7d:8b:cd:d5:89:03:fb:41:35:ae:db:86:c2:a2:6b:ac:40:
73:5d:b2:3e:c2:97:0d:0f:68:14:da:66:c3:bc:12:82:e4:07:
b0:ee:81:7b:c2:68:da:b8:e0:d1:af:ee:1d:87:ab:b8:cb:6a:
da:85:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:46 2025 by rpki-client