Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: f4Xy7sY81aFc2XzypGI6w58FcviA+tYXLnnZIrOuGpM=
Subject key identifier: 04:14:89:93:3B:7F:90:41:32:BE:2D:DD:2C:46:47:5D:24:2F:E7:4B
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 0197B6A175437C1AE4399D9060A0788461EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 055F
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: 9UB/0cCq0LXQviAPELlFFoq8o7yiHYRbx8yhpdXiFUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:75:43:7c:1a:e4:39:9d:90:60:a0:78:84:61:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=041489933b7f904132be2ddd2c46475d242fe74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:6e:4c:c5:b2:b4:ac:5b:76:05:59:00:b9:
c6:6f:f8:9d:67:13:3d:75:b5:b9:a5:3e:a3:c2:c3:
95:70:54:f6:b1:a5:75:06:b4:26:74:25:c3:5a:f0:
ac:d8:ff:c8:96:fb:99:63:e7:43:4f:44:92:75:86:
66:d8:b6:de:14:92:1c:99:a0:21:a9:bd:a9:22:f1:
5b:aa:4a:3c:79:c1:7f:ba:90:09:45:79:c6:73:f6:
1f:ee:67:9d:2e:68:d9:05:c7:a8:bc:cc:ac:7a:3f:
6d:a5:ea:26:d8:db:60:c5:ae:cd:9e:29:93:21:5d:
a7:ea:f3:9d:4a:ea:ea:06:e1:6a:97:de:8a:53:04:
c6:d6:9b:c0:52:70:de:00:a0:70:14:0e:bd:c0:c1:
de:5b:46:19:d2:5f:99:ba:5d:cc:06:51:98:ce:01:
76:50:0b:f1:27:2c:f0:1c:86:ab:1b:1d:23:ae:60:
29:14:f0:99:f5:09:8f:98:36:1a:b9:e3:b8:c0:e3:
a1:db:f3:97:74:a8:9e:a3:2a:3b:be:be:73:88:52:
39:b3:e6:f0:41:af:5c:df:3a:4c:69:0c:16:8e:8a:
14:60:24:83:96:f2:7c:7a:45:91:ce:84:a9:fb:ac:
ec:a5:d9:2d:da:2b:c9:7a:1a:d7:4c:54:b0:fd:b6:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:89:93:3B:7F:90:41:32:BE:2D:DD:2C:46:47:5D:24:2F:E7:4B
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e2:d5:49:2c:d8:a3:fc:25:79:71:bb:69:fa:9d:50:59:9a:
b3:29:31:4d:42:b3:71:df:a2:6f:21:93:3e:0d:11:53:89:9d:
bd:a4:ee:76:a6:cb:15:7b:86:cb:1e:d5:b7:39:b6:aa:a8:7c:
7b:77:69:b9:12:19:3d:15:4e:8c:94:45:2b:eb:65:c2:a4:62:
42:d0:2b:0b:62:a3:3f:29:ff:cb:75:48:1e:f4:4b:54:8b:26:
b1:5a:8a:d5:73:d5:84:30:9b:a7:c6:19:79:96:79:86:12:fc:
f8:4a:2a:d1:29:7f:1a:5d:f9:2d:4d:28:80:9c:10:cc:0c:c9:
14:9c:b4:c1:b2:b8:29:9f:9d:70:0a:b7:c7:c1:d5:52:2e:b5:
f0:c1:63:54:9a:f8:9b:31:ee:ae:a0:97:bf:c0:61:4c:03:b7:
69:fb:5d:56:5c:58:31:6c:19:05:1f:c4:04:01:f8:a0:5e:74:
f6:02:5e:ea:67:7f:af:0d:96:3a:80:43:03:4a:9f:2e:c9:e4:
b3:c7:4c:bb:f8:08:74:0d:3e:0d:7b:e6:d1:69:34:0f:34:18:
29:fd:b1:b7:52:cd:c2:99:ac:bf:19:e7:35:6c:64:5d:1b:6f:
a6:ad:88:18:67:51:e1:83:2d:af:6a:0b:04:d2:59:94:38:51:
42:96:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:40 2025 by rpki-client