
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
File: JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json)
Hash identifier: C9lRpFKUtgH6iiafl3zShJlkhC0HhwVGO4tVBdKg3Oo=
Subject key identifier: BE:C7:1E:7C:0C:3B:B5:E6:81:FE:B0:62:3A:04:7A:56:B7:70:47:49
Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
Certificate issuer: /CN=2539dc11c2f222e91044e1be7b281e576deee45b
Certificate serial: 01976997B3D604EBCC296B35412C74AA3C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
Manifest number: 63
Signing time: Fri 13 Jun 2025 14:00:39 +0000
Manifest this update: Fri 13 Jun 2025 14:00:39 +0000
Manifest next update: Sat 14 Jun 2025 14:00:39 +0000
Files and hashes: 1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: a/07DssRVeWVw+cERHTkcTmUJUi44sX3iYw2Q0VLhlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:b3:d6:04:eb:cc:29:6b:35:41:2c:74:aa:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b
Validity
Not Before: Jun 13 14:00:39 2025 GMT
Not After : Jun 14 14:00:39 2025 GMT
Subject: CN=bec71e7c0c3bb5e681feb0623a047a56b7704749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:3b:0e:6c:15:62:41:d1:fc:e6:c0:ab:35:
44:35:ce:40:f2:ae:93:4e:55:b5:ab:dc:3d:c0:21:
66:6f:97:77:a1:65:f1:8a:17:ee:ed:39:81:ac:a5:
6e:a6:3f:1f:98:7e:06:f6:e0:c1:c1:f1:79:eb:91:
b3:1e:4d:b1:ec:a6:c1:30:85:9c:7d:95:88:8e:01:
b5:c8:42:35:29:c1:77:f9:fe:a1:c0:1d:00:46:18:
51:32:2c:4b:ed:71:56:38:5b:c2:af:67:a4:93:24:
bb:4d:f9:29:48:4a:fa:70:38:ef:49:e0:58:a0:8f:
9c:cd:c4:f0:e9:57:25:02:ed:bf:fe:b7:80:f0:72:
3d:58:93:e6:c1:19:1e:21:6f:9e:2e:83:81:16:d7:
be:49:3c:e8:fe:42:95:d1:0d:6e:6d:b8:41:44:f2:
e5:fa:bd:d9:26:7f:94:43:d8:30:a7:96:ff:43:24:
5a:16:fb:53:0b:9a:78:c5:6d:3e:6b:b3:bb:0f:f7:
a7:a2:e8:7e:42:42:57:65:63:7d:83:8e:e3:87:5f:
3a:12:2c:70:22:89:7f:1a:90:0d:5a:01:e4:ce:aa:
60:83:1d:24:dc:18:18:14:7f:82:13:ab:41:9f:f0:
29:a0:63:39:87:29:d6:d7:07:90:48:2f:d5:46:1f:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:1E:7C:0C:3B:B5:E6:81:FE:B0:62:3A:04:7A:56:B7:70:47:49
X509v3 Authority Key Identifier:
keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:6d:52:ee:99:f8:7b:f8:e3:14:b7:6e:f4:0a:ff:92:77:4b:
2c:61:01:1a:a9:f7:8d:77:d8:5c:f7:ca:a9:80:24:f2:c4:b9:
4c:f2:4a:97:c4:d3:1e:7d:36:b5:20:46:16:58:b0:56:66:12:
23:c0:7a:ed:fc:bf:0e:b5:73:9b:48:73:bd:eb:d5:ba:2f:76:
9a:ad:01:7f:ab:74:05:29:16:8f:4d:cd:ec:9a:e2:21:1f:e6:
f4:b5:53:68:58:77:59:60:f1:39:fe:16:dd:69:09:aa:16:e2:
c0:dc:e5:8d:60:9a:38:16:ce:2f:60:8d:7e:79:e6:53:d5:c5:
ab:49:36:e4:84:55:77:27:ac:fa:73:96:d0:07:d1:6e:66:a3:
7f:8a:09:65:68:54:28:fe:ce:dc:bc:f2:46:44:8f:2c:dc:39:
67:9f:16:8c:e2:93:55:7c:73:ab:d1:3c:2a:b7:4f:06:dd:7b:
27:5b:01:5b:cd:34:7e:a7:83:df:3a:cf:61:60:8d:5d:e9:84:
99:b6:3f:4e:c2:80:bc:83:97:07:4b:cf:c4:34:af:cf:18:9c:
45:31:53:ab:08:79:20:7e:05:ca:25:11:48:30:bb:12:21:e9:
ad:b0:39:ae:95:13:ec:ed:5d:b8:3e:bc:42:33:60:08:b4:4e:
4e:af:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:33 2025 by rpki-client