Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: JrDZq/wrzZ9A+Nxg4SFnEIp5SN0fUQ86xW+xxF2QN/A=
Subject key identifier: 3E:AF:F8:06:3D:13:7B:4D:51:B2:E7:F6:2F:AC:17:06:DC:82:5B:69
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 01976D3DFB8685A0DD23013283CEDDFD0CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0D63
Signing time: Sat 14 Jun 2025 07:01:07 +0000
Manifest this update: Sat 14 Jun 2025 07:01:07 +0000
Manifest next update: Sun 15 Jun 2025 07:01:07 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: 3ZaKbfMVwGhh43JH1T+v8vjB5RRHeWttrWM8qD2NyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fb:86:85:a0:dd:23:01:32:83:ce:dd:fd:0c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Jun 14 07:01:07 2025 GMT
Not After : Jun 15 07:01:07 2025 GMT
Subject: CN=3eaff8063d137b4d51b2e7f62fac1706dc825b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:35:63:c4:fc:96:c9:68:e7:76:0c:59:fe:
d0:3e:f9:bf:1e:ce:11:fe:ec:dd:7c:fa:fc:c4:96:
7a:fe:ca:0e:5e:0a:19:06:5c:1f:36:9f:5c:01:26:
d5:59:25:81:20:9c:96:e7:ec:46:a1:e3:a4:d7:0e:
5a:87:fa:b1:1b:7f:1d:01:f7:b3:39:d4:72:e3:a3:
8b:68:a4:02:7f:22:53:e3:8b:a7:89:92:3e:7a:ce:
7d:02:b1:1b:7f:d2:32:30:58:b4:56:e8:60:5a:23:
fb:a5:d6:70:76:7a:d8:41:d8:e6:60:82:29:3f:50:
27:98:fd:52:2b:2b:34:fb:dc:b2:39:e5:43:72:fa:
d5:d7:28:e8:42:4f:be:57:78:30:97:44:23:d3:12:
fe:e1:e6:a1:7e:d5:3c:3a:d5:f1:51:74:8b:26:2d:
25:3f:14:f8:2a:db:1b:19:5b:f4:e2:ce:ca:0e:3d:
9f:d3:f6:e3:29:c8:57:c0:21:7b:2c:8f:f8:0c:3c:
0c:5d:b0:1c:61:1c:ca:4d:73:4f:82:cf:74:07:4e:
d4:ef:e3:60:cf:a4:36:c6:7d:0e:a4:fc:bf:93:3b:
4a:cf:81:1e:62:a5:fc:30:a5:ba:36:7f:78:84:87:
4d:f7:cf:9c:95:04:ef:be:39:f6:c9:ec:a1:a0:e0:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:F8:06:3D:13:7B:4D:51:B2:E7:F6:2F:AC:17:06:DC:82:5B:69
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d1:cb:a6:cf:ba:ef:05:b4:ef:e2:7a:db:ba:9a:9d:f5:fe:
e0:c9:70:33:57:e9:74:75:f7:50:b9:4c:fb:83:5f:5e:d4:a9:
74:91:71:25:26:25:a0:28:c2:79:8f:f3:7b:19:34:4a:ba:4c:
7c:2a:f9:6f:62:35:1b:5d:f5:99:a0:80:44:4d:c4:e0:79:5c:
82:04:72:aa:6c:26:4d:96:f2:e0:e9:7b:1b:96:99:71:92:c0:
84:3b:7e:53:30:40:e1:ce:06:b6:55:ab:c2:b2:a0:a6:93:6b:
e2:03:a6:68:12:f7:c7:ac:8e:9e:71:0c:76:ac:8e:5e:83:a5:
62:f0:de:5f:d2:bb:51:00:30:94:8e:74:cb:8e:e7:f9:d3:ca:
11:e1:34:10:0a:38:45:fe:5f:8e:bd:43:5e:45:65:0e:5f:fb:
f4:d7:0b:6f:ce:f5:cd:5c:a1:a0:fe:ab:2a:15:16:cc:7a:4d:
45:26:c2:c6:32:c7:22:cd:f4:d0:b7:54:ac:b9:0b:33:8d:c7:
16:86:db:c9:5f:73:5b:a5:f5:07:b9:0a:98:2c:30:ea:ee:87:
d6:11:31:2d:43:01:ba:a4:5b:74:ee:b6:9b:81:3c:7f:dc:71:
a6:74:5c:6a:6d:ee:7e:54:26:25:e9:17:99:0f:a5:81:e9:98:
91:03:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:52 2025 by rpki-client