Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File: JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier: Vr73UqkQZp8x+rQKPtk0E3+H1Sc5kTlJcDbdECflzf4=
Subject key identifier: 01:8B:1B:BA:0B:85:0C:F2:4F:4C:1B:7B:95:66:C3:10:DF:CD:94:95
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer: /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial: 01976961A4B5D703F43703E84A655B254E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:01:36 +0000
Manifest this update: Fri 13 Jun 2025 13:01:36 +0000
Manifest next update: Sat 14 Jun 2025 13:01:36 +0000
Files and hashes: 1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: v4wz9WmUMei8zqpv3rWQW885DZf6iXeSo0rSsxi0ZBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a4:b5:d7:03:f4:37:03:e8:4a:65:5b:25:4e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Validity
Not Before: Jun 13 13:01:36 2025 GMT
Not After : Jun 14 13:01:36 2025 GMT
Subject: CN=018b1bba0b850cf24f4c1b7b9566c310dfcd9495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:33:25:c0:9b:ab:b2:80:db:65:c8:fb:3a:
87:77:ba:bf:8d:98:06:d5:e2:10:eb:38:51:7b:8b:
7b:7d:e5:d1:20:6a:d5:44:b4:7d:a1:fb:52:8c:c6:
41:18:3b:be:0f:36:e4:0b:ba:61:e2:40:64:cd:6a:
48:76:e4:2f:e2:33:92:19:af:cd:61:74:9e:da:70:
25:82:da:cb:15:6d:42:d7:ca:e5:03:00:eb:5c:71:
e3:d4:fe:8a:6e:b2:53:f0:52:72:91:71:6b:fe:06:
09:00:14:0a:2c:02:15:30:b1:c5:3b:20:98:7a:d8:
bb:0a:a3:ba:1a:ef:bf:62:d1:be:b0:70:4e:47:46:
4f:80:4e:7a:e9:0c:1b:1f:9d:4e:ef:3a:22:59:af:
10:ef:f8:eb:49:74:9c:89:64:50:e8:b8:6d:db:15:
26:2c:25:a8:5e:4d:c0:05:08:1f:3e:c6:10:76:0e:
93:ff:61:f4:c9:01:1e:58:b0:21:41:e3:dd:5f:7c:
da:f6:c9:41:9c:17:c6:18:f9:94:10:94:c2:49:d7:
5b:47:15:e5:de:c0:90:6d:ad:f6:31:37:b1:85:dc:
5f:e8:4a:1a:a0:a8:70:29:b4:a9:64:ed:ad:53:e9:
b2:57:eb:33:a9:6c:9c:41:dc:b3:99:97:a9:9c:e2:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8B:1B:BA:0B:85:0C:F2:4F:4C:1B:7B:95:66:C3:10:DF:CD:94:95
X509v3 Authority Key Identifier:
keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:4d:c0:ec:57:dd:96:c4:90:f7:35:67:9d:b7:a1:6e:d2:
6c:78:45:93:7d:47:f3:33:cf:69:51:8b:b5:64:c9:fb:b8:f0:
2d:94:9f:fd:2f:79:6e:59:80:20:80:bd:f8:73:00:41:8f:cd:
7e:1f:e1:c1:4b:d5:d3:7c:cc:ca:bc:06:54:8d:b2:2c:e5:7e:
ae:41:74:2f:c6:d6:11:28:22:d8:69:70:7a:1e:8d:ab:99:85:
ef:af:cb:7f:04:8d:e2:72:74:ed:51:18:8f:29:fa:65:d0:b4:
49:63:6e:db:05:ec:32:c8:33:8c:f9:6c:e5:aa:92:17:4d:35:
24:64:4d:c6:55:c7:49:a2:e2:21:2c:2f:ce:c0:33:f7:dc:d2:
f5:2b:84:c2:28:92:a7:9e:23:48:38:c8:a8:e8:83:b4:d6:84:
31:bc:67:91:58:d7:c5:03:b7:f2:f2:a4:ea:bd:a8:4e:84:d9:
24:dc:1c:38:f3:ea:d0:e8:f4:43:da:de:d9:8e:53:b1:a1:42:
d1:85:92:bc:cb:a0:47:3c:b4:6d:da:e4:b4:d6:56:a5:b4:5f:
ce:05:d1:9c:ce:46:a0:e8:17:91:61:cc:cf:cd:68:6b:20:6a:
7a:83:f8:b2:4d:c9:f1:5d:81:b7:f5:9a:b8:1d:13:30:88:d9:
f5:0c:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:24 2025 by rpki-client