Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: ++cklMh1wOyuHbM8sd38lQubIO3Oly5I9RF7UDVYFX8=
Subject key identifier: DF:E6:EE:C4:0C:06:5C:C5:74:9E:4B:24:C4:C5:B1:E0:C3:66:D5:35
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 01976C98FAE214A6E7FB06745A7593051B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 09E1
Signing time: Sat 14 Jun 2025 04:00:54 +0000
Manifest this update: Sat 14 Jun 2025 04:00:54 +0000
Manifest next update: Sun 15 Jun 2025 04:00:54 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: RketQS21PVozzMK4ffWD9ntf+I5Ac0+wv+5/pTTiB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:fa:e2:14:a6:e7:fb:06:74:5a:75:93:05:1b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Jun 14 04:00:54 2025 GMT
Not After : Jun 15 04:00:54 2025 GMT
Subject: CN=dfe6eec40c065cc5749e4b24c4c5b1e0c366d535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:75:c8:df:95:d3:fe:46:4c:48:25:0f:77:
6d:1e:e5:c1:f4:9c:46:01:8c:1d:44:93:89:5a:77:
35:80:09:33:84:06:fb:3f:49:b9:a5:26:61:77:a3:
bf:e6:df:e7:c8:b4:3f:b6:c2:49:d9:2d:d1:43:c8:
9c:c0:85:32:c4:39:bd:78:96:9f:c5:cd:3e:19:c3:
c6:cb:24:8d:28:a7:72:c7:90:bc:07:18:95:f6:99:
6e:af:e4:43:92:dd:0a:c6:4d:b7:d7:35:53:7a:74:
db:82:61:fe:08:2d:22:aa:5a:50:24:69:41:00:89:
d6:bf:b8:4c:94:4c:b1:2f:d3:d0:17:19:04:45:54:
77:88:18:59:56:57:de:26:3a:8f:98:c6:a3:e5:be:
a0:05:e8:48:71:c9:67:87:d1:73:ac:78:af:84:ee:
03:41:c8:44:c8:60:59:3b:11:fb:f4:49:96:fb:26:
30:2d:88:52:d6:91:8c:a3:ee:55:1c:ac:5c:1d:fc:
83:77:fd:b8:50:96:41:f3:cd:90:ba:e3:4d:49:dc:
71:79:1e:1b:ca:a2:2d:85:7d:b8:8c:60:e0:1c:6a:
47:d2:2d:6b:da:25:8c:b6:0e:48:49:b2:be:bd:d9:
84:f2:7d:b9:5c:4c:79:bc:90:1c:f9:72:6f:e7:34:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E6:EE:C4:0C:06:5C:C5:74:9E:4B:24:C4:C5:B1:E0:C3:66:D5:35
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:f9:62:40:a1:0f:76:76:c9:64:b6:a8:fa:08:6c:58:fc:
f6:09:a4:60:5b:d0:5f:e4:0e:94:f4:71:e6:31:5a:97:13:f7:
ac:af:95:a6:90:10:08:bd:8a:4c:bc:25:9a:e1:64:db:ab:ff:
67:88:ac:0c:9b:36:fc:86:4a:8c:f2:a2:7c:0b:9b:78:b3:82:
63:7d:31:e9:e3:92:3b:8e:dc:db:44:9c:bf:71:f4:23:13:d4:
aa:52:11:91:fc:8f:c1:ce:d6:ff:e6:93:29:80:cf:83:a6:ce:
fa:da:3b:93:f7:d2:6c:0b:ce:18:e8:40:b5:d5:83:bd:08:3b:
2e:74:a6:2b:ee:b3:68:68:50:76:de:bd:52:24:5d:92:bf:df:
9d:ba:b8:1b:fa:d0:50:a9:e1:7f:51:92:35:9b:6e:f1:0a:60:
8c:f7:c5:41:55:19:53:30:a3:2c:01:1b:9d:17:2b:8a:60:ed:
d8:aa:2c:a4:6e:f9:55:fc:c5:39:3e:70:34:9b:3e:36:0d:8c:
8c:9a:98:e1:d8:fb:f9:fb:b9:6a:54:38:6d:41:b2:c9:28:4e:
89:d3:16:2d:be:68:a1:fc:c0:26:97:c9:bf:d5:f2:08:68:b5:
28:01:be:e6:94:b7:37:be:87:1a:6f:58:9a:c8:08:ad:c0:c9:
ff:8b:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:53 2025 by rpki-client