Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: uLkguUfzAp7nfLI3f8s6hbW1hqVw88KVcYfoGyMgS50=
Subject key identifier: 74:1B:42:3E:B2:F8:94:3A:F4:32:F5:76:52:6A:CC:B6:97:DE:EC:D4
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 019776E6396CA11539834EF801239CBE0CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 04A6
Signing time: Mon 16 Jun 2025 04:01:28 +0000
Manifest this update: Mon 16 Jun 2025 04:01:28 +0000
Manifest next update: Tue 17 Jun 2025 04:01:28 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: P3cSsBOBf18Kl9qgP09qSWvfvfeX+p9gU7pQ8jZY4+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:39:6c:a1:15:39:83:4e:f8:01:23:9c:be:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Jun 16 04:01:28 2025 GMT
Not After : Jun 17 04:01:28 2025 GMT
Subject: CN=741b423eb2f8943af432f576526accb697deecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:29:63:aa:e1:e9:5d:b1:5b:8f:1c:d1:03:
8f:6b:44:a2:51:2e:53:7a:da:11:b2:de:eb:04:ff:
77:b0:84:65:b6:1a:fd:22:1d:28:2a:f6:8d:5c:05:
1b:77:d2:6b:ae:ad:0a:48:3c:d2:ce:03:01:ef:28:
53:6b:65:33:9e:f9:3e:2c:50:3e:ff:e4:f4:07:70:
48:c0:bc:9e:bf:1c:71:ed:98:f5:ec:b5:fe:cd:a0:
90:4a:6c:f9:46:ca:0c:2d:d8:ea:74:7f:31:63:ac:
e4:c6:11:c2:5b:00:b6:67:47:6c:61:03:26:a6:72:
1c:99:88:47:9b:60:e9:75:42:7b:d4:a3:9d:ea:54:
10:76:aa:3b:e1:03:56:3f:4a:d2:12:5f:ae:bf:24:
7e:54:cc:81:fb:19:30:a6:9b:a1:57:d7:8c:b8:62:
df:03:27:72:05:82:5a:71:37:80:8c:d0:ef:2d:44:
7a:31:f0:16:fd:09:05:8c:ee:5c:37:80:2d:90:a6:
21:fe:fb:35:e2:82:be:d5:26:cb:9b:78:ca:cc:b1:
24:bb:f1:e1:e4:42:21:c0:8a:44:c6:de:04:58:36:
71:38:1f:15:55:bd:b2:cd:bc:20:41:c6:47:5e:54:
3e:34:41:42:8c:46:4f:32:99:73:9b:1f:1a:f7:31:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:42:3E:B2:F8:94:3A:F4:32:F5:76:52:6A:CC:B6:97:DE:EC:D4
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:b5:78:70:86:02:4e:a7:bb:88:8b:d9:c8:ce:35:a8:07:
c5:c2:47:8f:4c:34:46:32:98:5c:a1:64:a1:0c:a2:f3:7d:37:
4f:9d:11:ac:c4:da:56:fb:5a:76:ed:6f:a6:e8:0b:73:23:c9:
25:53:45:a2:64:f2:e5:f7:f9:90:0d:c7:0f:e5:fb:a5:66:0a:
08:b4:30:c6:70:33:0e:df:d2:4a:b0:e6:5b:a7:64:ff:77:b3:
93:0e:69:52:1e:a2:e8:e1:13:9e:97:dd:58:58:aa:27:72:f3:
e8:3e:cf:62:88:17:4d:09:7e:35:34:da:2f:00:51:fa:85:ca:
bd:f9:72:5e:bd:46:74:9a:d1:a1:27:57:96:50:f3:fd:3f:bb:
c6:58:91:cb:94:a8:b8:46:f2:bb:22:13:98:89:6d:64:ab:43:
ac:b7:17:25:96:e9:5b:2f:72:cd:23:ef:d5:23:10:db:b6:b1:
e7:17:7b:9a:b7:e4:ee:c4:83:f3:a7:77:33:7f:aa:68:3e:99:
30:99:a3:80:b6:d5:3e:cd:82:dc:5e:ac:43:1b:43:f4:f6:33:
ea:44:69:f1:2a:e6:ff:27:dd:a7:c1:e8:aa:79:0f:1b:a0:48:
92:84:14:c8:e7:02:a8:31:e1:dc:15:ee:c9:73:51:22:e2:93:
82:0d:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:01 2025 by rpki-client