Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File: J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier: zb4a6q71F9sQnSt1UNrUjwM+vZaHqGzY4GjRKkwoic0=
Subject key identifier: 34:23:0B:BC:1F:48:4B:B9:FE:A6:93:EF:C7:53:6D:27:69:A4:F3:3E
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer: /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial: 0197711ACCEEA4368ADED9123A13CCBDE7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number: 0EE3
Signing time: Sun 15 Jun 2025 01:01:11 +0000
Manifest this update: Sun 15 Jun 2025 01:01:11 +0000
Manifest next update: Mon 16 Jun 2025 01:01:11 +0000
Files and hashes: 1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: tdTu9wk+PgCuZYX9udlliKUTh0H1ktPIb7wR/I+IHT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:cc:ee:a4:36:8a:de:d9:12:3a:13:cc:bd:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Validity
Not Before: Jun 15 01:01:11 2025 GMT
Not After : Jun 16 01:01:11 2025 GMT
Subject: CN=34230bbc1f484bb9fea693efc7536d2769a4f33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:db:8f:b6:19:56:6f:f0:c9:88:90:02:68:
36:c2:af:d5:13:84:93:a0:f9:60:b6:8a:19:9f:78:
63:ae:d2:18:54:d4:52:db:d3:ec:32:e9:e1:10:79:
10:0e:1d:43:cc:48:23:c5:32:b9:ac:bf:cb:d9:62:
eb:f5:c7:d0:c5:c7:20:10:8e:08:80:fc:90:a7:59:
7a:30:df:26:9a:ec:90:86:07:91:85:39:4a:63:05:
13:b1:eb:0a:63:66:55:c4:da:a0:aa:e5:60:d3:5d:
24:fc:51:4a:85:62:45:7e:95:e2:ad:d8:0b:68:aa:
ba:f4:3c:5c:51:e9:80:04:df:6e:e3:09:89:72:6f:
68:5b:0b:5c:0a:e1:a6:84:f4:f2:73:15:ff:28:e4:
5e:38:53:04:75:b2:38:2c:b1:86:f5:b4:e6:0a:4d:
02:26:70:f1:94:26:b1:26:cc:34:39:72:3a:cd:9a:
83:5e:90:32:1a:78:ff:fd:1f:bd:65:f3:27:86:d3:
56:92:e6:68:ae:8b:99:1f:65:c8:dd:9d:24:e2:1f:
d9:f8:b8:98:0f:0c:a2:ca:dc:4b:a2:24:90:fb:74:
97:ea:4b:fb:e6:55:23:72:0e:6a:b3:58:6d:bd:43:
35:eb:32:b5:4d:19:df:69:cc:12:c8:34:e2:23:f9:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:0B:BC:1F:48:4B:B9:FE:A6:93:EF:C7:53:6D:27:69:A4:F3:3E
X509v3 Authority Key Identifier:
keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6f:a1:1e:e6:07:85:5c:34:79:81:a4:37:0f:df:a0:35:e2:
4b:23:1d:6c:f2:c5:83:11:2c:2f:16:94:58:c5:37:44:7d:55:
d8:87:55:6a:16:8e:2e:d0:2b:cd:52:b0:fc:76:7b:8f:63:36:
3c:47:8b:9c:7a:7e:53:59:33:f8:04:ee:81:77:cb:c8:49:ae:
a9:b4:d6:9b:d9:b1:e0:4b:ce:f4:41:06:79:f1:bb:55:60:d5:
c7:2c:43:2f:54:d2:ce:0e:6c:e6:26:6c:65:3d:6e:29:20:aa:
71:8e:56:b1:79:7e:cb:81:9c:32:25:e5:a0:9f:70:13:d9:af:
17:db:5b:2a:70:41:1d:1a:d5:ee:94:a4:6a:35:67:b0:c1:fa:
b9:c8:79:94:f9:8f:e2:b7:bc:c3:8f:bb:2b:d2:fb:7e:00:c8:
87:37:12:57:96:98:e0:d4:f0:4a:dd:70:a8:53:18:02:a1:b8:
76:59:3f:b7:a3:65:01:5f:62:cc:4d:6a:a3:b7:95:1d:75:b5:
73:17:17:e6:6d:55:70:c1:c8:1c:42:5e:82:9a:8a:7e:ff:f3:
b0:fd:5d:64:4e:55:7e:96:70:43:52:86:be:80:f7:a9:31:b5:
fe:7d:9f:4c:78:8e:3f:3c:50:cc:59:1a:ad:c0:57:ff:1c:24:
fa:14:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:12 2025 by rpki-client