
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier: 00+S4M+SMx6SoYURJjFk1Dq3qwttnCiD/0kwvQIp7t8=
Subject key identifier: 25:BA:98:E9:8C:40:C6:E2:70:5E:01:AA:B2:0F:63:69:FF:AF:79:46
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial: 019770E33F317D586D411BD5495176C7A003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number: 45
Signing time: Sun 15 Jun 2025 00:00:30 +0000
Manifest this update: Sun 15 Jun 2025 00:00:30 +0000
Manifest next update: Mon 16 Jun 2025 00:00:30 +0000
Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: lHGBdBYadJptVkbSWxs1Er+wkwGw8AxjmVhlVePb584=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:3f:31:7d:58:6d:41:1b:d5:49:51:76:c7:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Validity
Not Before: Jun 15 00:00:30 2025 GMT
Not After : Jun 16 00:00:30 2025 GMT
Subject: CN=25ba98e98c40c6e2705e01aab20f6369ffaf7946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:f0:e7:b0:3a:82:f1:11:8c:81:7f:a2:c3:
03:e5:bf:73:e4:db:5a:c4:80:00:ae:df:78:4a:1d:
77:99:03:b3:08:b0:ff:a0:35:4f:38:13:0f:50:45:
cf:15:50:a8:32:c0:d6:5e:c9:ae:7f:16:16:2b:d2:
f3:57:0e:39:37:34:22:bf:b2:b9:c6:12:b0:04:a2:
c1:6f:b0:21:7d:bc:93:42:dc:ef:39:0a:dc:e2:40:
c4:18:23:29:cd:e8:e9:e1:4e:36:ff:c7:7a:60:1f:
fd:6f:75:27:d4:d8:5a:04:fd:3b:e2:2a:89:81:5c:
67:31:34:16:49:d1:56:c0:b1:e8:8f:e5:d6:8f:f9:
60:6b:44:1b:15:d4:6a:93:72:e8:07:3a:90:75:0d:
57:fa:52:5f:64:42:be:1e:a5:51:74:f8:9f:5c:b7:
1c:6a:83:82:99:62:9d:0c:b2:2f:57:ad:92:58:f5:
f8:c9:ab:2a:01:4f:2e:fe:8a:ca:f3:90:fb:f5:4a:
39:6d:ea:82:b2:78:53:22:65:b1:a9:47:ce:31:16:
c9:aa:da:ee:b1:29:92:5c:67:4f:28:39:38:60:10:
ea:9c:70:08:09:f2:b7:e1:12:a3:46:85:c7:c7:a7:
21:95:8f:fb:e6:11:d8:67:b0:fd:d2:4e:f6:0c:61:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:98:E9:8C:40:C6:E2:70:5E:01:AA:B2:0F:63:69:FF:AF:79:46
X509v3 Authority Key Identifier:
keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:78:15:54:b5:32:e8:00:0c:ce:83:64:d0:7e:ef:4b:bd:
60:d6:c1:cd:72:8d:e8:70:e2:bc:ac:22:58:2f:96:5a:bd:c6:
9e:15:c5:38:37:9c:66:b1:5c:72:9d:56:84:f8:81:c7:44:c3:
34:c4:cc:99:8b:2e:40:e8:7f:79:ac:9d:42:64:66:c6:63:6a:
34:b8:63:8e:17:4d:52:1c:93:2d:67:03:6a:17:4e:bf:58:85:
fc:08:ee:38:05:e0:ca:18:35:cc:46:68:a4:6c:a8:6b:e2:09:
73:a3:2e:71:f2:ec:f6:38:8b:91:d2:13:f1:55:08:a3:65:1b:
fd:3b:45:74:b9:37:cb:9a:37:77:7b:70:cd:76:ab:54:ec:92:
bf:4d:40:32:78:85:34:aa:a3:f2:30:c7:26:ce:ee:6c:85:b2:
14:c6:9a:ea:55:b0:dd:79:8b:cc:97:a9:7e:65:bc:b2:68:48:
4a:ce:0a:6d:9b:7a:2b:25:bb:e1:28:b2:4e:4f:a4:e2:9b:1a:
63:ab:18:88:e2:ae:bb:3a:16:fa:fe:73:f6:8f:06:54:4e:5c:
ba:26:5b:f1:c8:cd:88:c2:fe:bc:34:7d:bc:03:b9:cf:8d:f1:
de:01:99:5c:8f:e2:fe:b6:e4:ed:87:ac:bb:73:a4:c7:7e:87:
be:21:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:33:17 2025 by rpki-client