Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: vpjTire6B0h0idHQ/tMruP3kmhI81orLm3ptClZXWYs=
Subject key identifier: 47:EF:8A:C3:37:98:93:BB:17:09:77:77:B9:9D:89:CF:5C:41:56:54
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 01976D3E496A3B0E995954C07927D584F4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 0F1B
Signing time: Sat 14 Jun 2025 07:01:27 +0000
Manifest this update: Sat 14 Jun 2025 07:01:27 +0000
Manifest next update: Sun 15 Jun 2025 07:01:27 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: KaMrkw1dW2eIP604PxAE01D84JOPUHmhDqD7aCDOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:49:6a:3b:0e:99:59:54:c0:79:27:d5:84:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Jun 14 07:01:27 2025 GMT
Not After : Jun 15 07:01:27 2025 GMT
Subject: CN=47ef8ac3379893bb17097777b99d89cf5c415654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:06:96:11:90:0f:b9:03:d5:aa:f8:18:35:
f9:78:a2:07:ee:fa:92:25:34:b8:89:a2:8f:8d:f1:
36:20:83:a6:0a:e7:8b:18:44:d4:c7:fa:5d:bc:4e:
2e:19:01:f2:81:4f:f1:e2:51:11:6f:5f:79:54:1e:
d0:dd:54:3e:9e:01:9b:8c:6a:95:41:fb:2c:2b:68:
86:ea:e4:19:d5:92:eb:1d:b6:24:98:52:76:e9:92:
64:89:70:3d:97:cd:c4:9c:40:e5:3a:82:52:11:8c:
12:2a:ef:5d:c8:03:cf:95:49:35:9a:5b:7e:cb:0a:
5c:0e:87:55:c2:73:78:7e:e6:17:32:1f:5d:5d:f7:
55:d0:8b:ca:2f:57:6b:29:cd:97:4a:bc:cd:ec:3d:
02:7c:70:6d:a5:3e:3b:02:81:85:90:69:af:e6:e8:
67:f6:86:32:fc:c4:de:ea:64:64:83:f3:c8:3e:dc:
0f:a0:95:be:89:99:de:ad:4e:8e:b0:1b:8a:74:e0:
73:ad:4b:a2:4e:9c:f0:6e:5b:07:f5:ae:d3:3c:79:
7d:1b:48:b5:9a:16:8f:e0:2f:3a:e9:9e:d9:d9:fa:
e1:a8:00:2c:6c:68:ed:9e:f0:76:c0:3e:ed:9f:eb:
b0:85:84:3b:71:c3:36:73:e8:21:4d:b0:5c:1c:71:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EF:8A:C3:37:98:93:BB:17:09:77:77:B9:9D:89:CF:5C:41:56:54
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:c7:0e:a5:ea:46:60:71:ba:ef:08:0d:82:cf:06:50:fb:
a7:4f:16:8b:97:2c:7c:25:ad:53:d1:e0:ce:07:02:6f:a8:38:
64:0f:d7:1f:87:9d:22:e3:f4:11:6b:a6:59:7a:18:9d:0c:c6:
61:b3:90:b6:3d:8a:6f:97:9d:a0:a8:5f:83:c8:cd:f5:e2:ee:
73:d7:6c:47:83:36:71:63:7a:ba:83:7b:cd:bc:2a:28:61:c6:
3a:cb:52:2d:44:88:4e:17:f5:f1:fd:4f:af:67:46:f3:73:bf:
56:2b:ab:bc:f5:ef:e5:1d:59:b5:9d:af:d2:c5:56:2b:2f:26:
a7:0f:b1:2a:df:43:7e:95:45:73:92:4d:d0:8c:45:66:18:6f:
b9:4a:cc:d3:14:c2:e3:03:7d:02:e0:ef:dd:cf:ba:da:96:b7:
34:dc:e6:cd:7a:a2:ef:d7:05:f9:c3:9c:71:21:55:42:13:e2:
20:97:33:10:a3:64:93:d4:e8:06:23:cd:cd:94:97:df:b5:91:
02:3c:77:11:78:5b:9f:1f:e2:44:5b:2b:a8:0b:0a:8c:3d:8d:
5a:50:d1:dd:92:01:b1:5c:e3:d5:e6:c1:4c:84:be:d6:18:80:
64:0f:7d:3a:6f:d0:bc:86:14:4e:5a:d2:51:8f:95:43:a3:3b:
28:26:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:35 2025 by rpki-client