Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier: wN5b3zCsGhuMdcG4Moap5I9Pl9+6IJofcMHTRIHJ74M=
Subject key identifier: 06:E9:F4:1E:C4:FC:F3:19:AC:82:F5:E8:EC:37:55:F1:A5:F2:FC:35
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial: 019776AE48F9A5A8EE24475AD5E2BE0F441B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number: 040B
Signing time: Mon 16 Jun 2025 03:00:22 +0000
Manifest this update: Mon 16 Jun 2025 03:00:22 +0000
Manifest next update: Tue 17 Jun 2025 03:00:22 +0000
Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: lJ7gUIdiv5bY3OAJderlnucpbncUHptJ6oqaVbAMqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:48:f9:a5:a8:ee:24:47:5a:d5:e2:be:0f:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Validity
Not Before: Jun 16 03:00:22 2025 GMT
Not After : Jun 17 03:00:22 2025 GMT
Subject: CN=06e9f41ec4fcf319ac82f5e8ec3755f1a5f2fc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:dc:c7:27:f5:80:6c:cc:d7:c4:a8:df:22:
01:a0:23:0a:22:da:ca:8a:1b:3b:a2:b7:6d:d7:b7:
9a:76:47:dc:4e:79:12:3f:aa:52:f1:ca:45:6f:68:
d6:e7:61:5b:8c:a9:4c:1b:e1:71:2b:3e:12:c5:76:
a4:e5:22:ba:11:6d:46:3f:9d:8c:48:10:02:9b:8d:
d5:27:8e:27:15:b2:eb:76:3a:b3:78:0f:23:21:46:
4d:c2:3a:15:00:b0:2f:e4:28:2e:72:85:2c:f0:c8:
70:6e:b7:45:b6:ca:a0:97:ae:26:7f:df:a2:a1:78:
93:1f:d1:51:c6:f9:80:02:9c:a8:ef:38:66:7d:a6:
24:4f:81:30:0a:dc:b0:28:95:f7:52:bd:a6:d5:c0:
70:1e:82:ea:16:91:69:e2:df:e2:6c:f7:25:de:87:
90:53:58:67:72:a5:00:e8:c7:34:03:f7:50:6c:7e:
0c:74:18:19:d0:41:8a:16:4e:45:9b:b6:37:2e:cd:
2b:73:ec:c4:22:8a:44:09:30:e3:5f:8a:92:b2:1f:
18:c3:90:71:76:20:9e:53:b7:56:fa:c9:0d:03:de:
d8:9c:e7:d7:c5:a9:15:f5:6e:2d:70:e6:b3:7d:f4:
6c:1d:c7:aa:48:0b:89:5e:2c:55:d4:ed:50:af:f8:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E9:F4:1E:C4:FC:F3:19:AC:82:F5:E8:EC:37:55:F1:A5:F2:FC:35
X509v3 Authority Key Identifier:
keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:4e:fd:b6:fd:39:5d:35:8f:e1:fe:e2:7d:03:6c:3f:72:
fb:4e:61:32:78:95:07:95:a7:c3:d8:87:d5:9f:7f:e6:ac:00:
c8:a8:a9:9a:ae:0a:47:21:87:38:db:97:64:29:15:a2:5d:9c:
de:15:05:00:88:aa:98:54:93:d4:b0:9c:0b:c0:cc:45:e6:7c:
45:58:a4:3c:13:e0:33:60:88:37:ff:bd:af:e6:c8:7b:62:5e:
0f:60:e2:1f:25:a0:46:2b:6d:be:e6:ac:3c:cb:19:b0:7d:2c:
53:fb:da:3c:64:56:a0:c3:ad:f2:4f:12:83:76:0f:6c:6e:d3:
d4:32:5f:fe:a9:b1:e6:68:04:2d:5e:a9:ad:34:83:8b:7a:2c:
58:64:8e:70:71:d2:49:3a:76:e0:23:2d:39:2a:e6:55:38:b8:
c7:61:d1:4a:43:7c:da:37:d8:5a:ac:8f:bd:db:41:36:02:db:
21:8a:ab:25:33:a5:97:60:6a:ad:8c:50:fb:6a:42:85:6f:78:
cd:65:7b:a7:51:72:ab:9f:37:78:30:cb:ac:dc:7a:dd:6f:c2:
36:e3:67:80:ce:06:98:91:0f:35:84:41:46:f7:d6:0c:92:26:
9a:53:f6:3b:8c:74:21:b9:7c:f4:20:d9:b4:5d:25:49:f7:09:
1c:02:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:11 2025 by rpki-client