Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: 3CncZjAZHCFwZy7ZvTrK4aL8t+QR8CtNUriMcy0NsIU=
Subject key identifier: BE:4F:7B:D1:1D:40:B2:E0:83:CB:94:B9:C6:8F:A9:5A:DC:6B:2D:27
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 01977308CC504B8A57D07DF330A724019384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0983
Signing time: Sun 15 Jun 2025 10:00:45 +0000
Manifest this update: Sun 15 Jun 2025 10:00:45 +0000
Manifest next update: Mon 16 Jun 2025 10:00:45 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: TTjSHuH4xdeetqQyUHFTfjAC1BMaKeKBdYvnbp9URZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:cc:50:4b:8a:57:d0:7d:f3:30:a7:24:01:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Jun 15 10:00:45 2025 GMT
Not After : Jun 16 10:00:45 2025 GMT
Subject: CN=be4f7bd11d40b2e083cb94b9c68fa95adc6b2d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:3c:f2:ff:ca:bf:c1:21:e0:fd:c0:d7:f2:
f8:5a:77:c8:e6:4d:90:23:13:a3:86:20:48:bc:ac:
38:26:ea:96:44:e9:54:4c:67:e9:da:88:12:ee:cf:
a4:76:b0:fd:65:3e:d3:ab:3c:a3:39:a0:62:d5:1f:
3a:74:03:55:50:ef:47:b1:d2:24:1b:e8:4f:09:d9:
d3:b4:61:1d:d3:8d:a1:8c:58:d6:7f:43:28:9f:2a:
84:75:51:c2:f2:a6:9d:36:73:a3:33:62:e8:1e:f9:
3b:f9:27:81:6a:3f:bc:ac:05:28:6b:2f:02:27:87:
be:14:d6:65:be:dd:78:da:2a:61:ca:0f:5d:7e:7c:
6b:27:1d:d3:d4:2f:d3:bb:10:51:d5:62:0d:78:26:
ee:40:c3:e9:27:0c:c2:b3:76:ab:d5:c4:95:84:c3:
ee:88:15:db:d2:db:73:68:5e:e8:53:34:ef:7e:5f:
5c:fa:09:48:de:88:4e:18:d3:ce:b2:75:76:5a:69:
50:3f:93:7d:61:09:d3:07:57:70:32:b8:46:77:93:
54:45:c6:c8:c3:7e:d6:cb:2f:3f:53:d1:d4:3b:db:
8a:41:91:81:e7:4d:f8:76:1f:f5:d8:03:fa:ca:c3:
72:a8:92:ff:4e:34:04:9d:43:9d:a6:8b:8c:14:85:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:7B:D1:1D:40:B2:E0:83:CB:94:B9:C6:8F:A9:5A:DC:6B:2D:27
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:df:5a:81:10:96:20:e9:30:39:ba:55:22:b3:2a:ed:f9:08:
6b:8d:8a:1c:50:3f:c9:77:0c:95:59:e5:42:da:45:17:b8:ce:
e3:85:8b:64:77:49:d4:b1:35:a6:28:31:78:f2:51:b5:8f:0c:
cd:4f:79:d2:88:ad:d2:ac:88:aa:52:0d:40:22:b0:5d:21:98:
3b:4b:77:2a:28:2e:aa:2d:e8:aa:bb:f7:7f:d9:02:eb:42:73:
ac:39:31:6f:0b:c5:fb:cb:27:51:12:0b:34:c5:88:17:8c:7b:
44:f9:4d:59:4c:48:f0:d9:e6:7c:ec:f1:70:83:b9:d1:ba:d7:
88:44:20:b1:82:d6:77:02:be:76:9e:36:18:e4:14:52:73:29:
5f:a6:da:ed:d5:26:98:e2:ad:9e:64:3f:df:f9:ca:43:2e:b3:
a9:fb:b1:18:ea:76:af:69:9e:3e:49:cf:98:83:3a:2e:67:85:
59:aa:ce:39:82:e2:79:c5:fa:56:a7:76:8b:6c:a5:46:e6:47:
d5:34:20:11:8f:c6:aa:56:d7:4d:d1:4d:4c:02:f6:2a:f8:25:
67:f5:bf:50:d6:64:38:70:be:9c:fb:51:44:01:8e:5c:62:a0:
b0:15:bb:73:1a:51:80:73:b6:40:fd:11:45:1a:08:3e:c4:43:
f4:9e:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:32 2025 by rpki-client