Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: qMJDOYkfWtq8ndX7PZUXSh6rVCaTH7YUo9bJxVPcI9k=
Subject key identifier: AF:81:1A:6B:FB:03:67:41:70:00:C9:5A:26:71:FA:15:84:35:CC:8A
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 0197B70EC12A69CF6B4F22EE7770131A3522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0BA1
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: jmw8LDDoE9R72TxYn9GW1E4w9xeK/EJ8ndQHNIVvaRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c1:2a:69:cf:6b:4f:22:ee:77:70:13:1a:35:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=af811a6bfb0367417000c95a2671fa158435cc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:84:1d:ea:1b:db:9c:b0:bd:ae:db:11:f3:
69:fc:c8:e4:30:b6:d1:82:3d:ff:3c:96:7e:07:d6:
89:4c:bc:d8:4b:5c:ea:fd:9d:75:39:37:24:f1:2a:
ed:26:2d:44:55:d7:00:47:ff:74:eb:7f:91:5a:12:
4a:73:4b:fe:8f:54:7f:82:d8:c1:a7:d8:c3:9f:dc:
eb:c8:8d:0c:0f:8c:7d:dd:fa:9c:be:1e:c9:f4:03:
f5:09:6a:83:69:2c:c2:82:da:6f:90:a0:8c:ed:e9:
48:ad:eb:fa:13:e9:f5:10:b9:69:ab:c9:44:77:b4:
18:8e:3c:16:fa:5f:95:b0:86:60:fe:a0:dc:90:17:
8d:31:ea:26:f1:39:c9:6c:c0:09:b6:58:af:cb:d3:
b7:c1:15:fa:c8:f9:f6:1d:ff:21:c7:84:bd:c5:5a:
a2:cd:63:2f:28:2b:5a:bc:ce:f1:2a:82:97:4b:d4:
0c:f4:a5:e0:fb:01:ab:7d:8d:a7:dc:88:e0:e9:ff:
10:89:68:83:d9:e2:85:b3:df:9d:4d:f3:e7:0b:22:
70:7d:e3:5f:44:cb:cb:72:14:8b:85:c8:42:c8:72:
25:4c:99:37:25:3d:75:22:38:63:df:73:f4:7a:71:
c8:8a:b8:36:3c:aa:42:72:a3:df:2e:43:69:15:89:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:1A:6B:FB:03:67:41:70:00:C9:5A:26:71:FA:15:84:35:CC:8A
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:45:df:54:a0:b6:6a:9e:b1:e4:0b:a5:3d:55:20:ca:1d:b1:
14:5a:90:d3:cb:da:4b:9c:b8:eb:a1:61:7b:c8:f7:ae:76:c8:
91:f4:49:bd:1e:bb:d3:1f:79:c1:84:db:83:68:bd:26:a0:47:
29:af:01:dd:aa:8b:7b:f8:bb:d2:98:64:28:2f:38:2a:d0:0c:
28:47:0d:2b:65:0e:06:0c:4a:32:a6:d3:66:03:dd:14:86:b7:
83:f5:9b:40:42:e7:df:19:4d:f9:c7:a2:b0:34:d5:5b:51:ea:
b7:a2:7b:58:c7:d2:b9:14:d1:e6:ae:35:63:76:7c:d9:d0:10:
95:d1:cc:c2:e0:50:32:e7:b6:b5:04:5f:5c:44:11:14:be:c9:
67:8a:1e:07:30:66:6f:c5:b0:ce:48:3d:76:67:20:bb:b0:67:
0b:27:33:c1:f1:96:a9:90:fd:e3:73:99:e9:71:b8:70:05:a4:
55:d4:8a:63:f2:20:03:ab:98:7d:e2:2e:b6:2e:2f:9a:a6:18:
96:7e:e3:ee:86:02:f9:4a:1e:e5:63:e2:35:a0:35:2c:1a:02:
7a:55:3b:17:60:3d:f2:af:02:a3:d8:7c:9c:b9:23:25:88:5b:
72:24:5c:49:1d:c0:74:8b:6d:56:af:7d:e9:21:28:a7:0f:fa:
88:84:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:21 2025 by rpki-client