Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json)
Hash identifier: JVhRoOwgFiWYV16PuL7fsE7G6Wz0z2J8nrHqUAtfFg8=
Subject key identifier: EC:85:13:24:D2:47:33:F3:A0:35:77:4D:6C:C5:EE:80:B1:C6:63:FE
Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Certificate serial: 0197906E1D531AE1E7803FE21B6F479443DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
Manifest number: 08D1
Signing time: Sat 21 Jun 2025 03:00:24 +0000
Manifest this update: Sat 21 Jun 2025 03:00:24 +0000
Manifest next update: Sun 22 Jun 2025 03:00:24 +0000
Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: oMC8S9eeX2KdEY5FA8aQvl9EADAmJlqM+fgKG8AlCNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:6e:1d:53:1a:e1:e7:80:3f:e2:1b:6f:47:94:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Validity
Not Before: Jun 21 03:00:24 2025 GMT
Not After : Jun 22 03:00:24 2025 GMT
Subject: CN=ec851324d24733f3a035774d6cc5ee80b1c663fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:cf:70:bf:a9:ba:a9:50:d4:d5:18:10:53:
82:9d:ab:6c:83:02:18:82:bb:ad:2c:f8:c6:07:51:
3c:18:ab:9d:07:55:f4:60:34:58:5c:95:0e:00:87:
28:42:cb:cf:fc:41:3c:e6:6c:27:f1:a0:06:65:af:
ca:99:7b:f0:db:9b:f2:fa:9f:7e:88:cd:76:72:7a:
aa:27:08:ad:33:58:af:18:4a:69:dc:d2:17:70:e1:
e1:b3:8b:b2:26:2e:f8:14:93:36:a0:46:d3:0f:73:
87:e7:be:fe:9b:13:48:d6:fb:35:5f:99:60:06:ed:
0b:7b:d9:68:93:76:b8:16:a4:5b:39:72:f5:94:0c:
9c:2d:ca:1d:11:6c:8b:28:1b:fa:b1:11:8f:08:a7:
46:50:89:a9:38:ab:cd:47:c2:9a:47:f7:0d:0e:a4:
77:60:5c:ee:ef:c8:39:43:6b:9c:37:85:e3:97:3a:
4e:dc:e2:d1:47:4e:93:09:81:a5:41:e1:e0:18:70:
f2:1e:7a:80:02:2b:5d:be:b2:24:13:9d:25:d3:37:
71:d1:7e:1a:17:cc:3b:64:f3:a0:53:ab:ec:48:0b:
fc:d4:81:30:89:da:82:83:ce:00:b3:9b:97:26:c7:
6b:13:83:78:b8:b4:53:cc:a8:bf:bf:db:c5:da:e2:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:13:24:D2:47:33:F3:A0:35:77:4D:6C:C5:EE:80:B1:C6:63:FE
X509v3 Authority Key Identifier:
keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ef:70:d7:d4:9e:d1:f0:32:7a:fa:94:19:d0:4b:73:56:a7:
49:f8:4d:af:3a:b5:9a:f1:d8:ce:99:50:67:83:32:7d:c9:84:
86:5a:78:b0:c0:a5:15:ef:80:cc:a1:56:76:b9:83:d5:f7:76:
9c:a5:96:c0:33:04:f1:d6:4c:21:f5:d8:20:7b:54:ac:d7:02:
92:4d:b5:fd:a7:9a:61:ad:bc:59:35:fc:f8:70:8a:d7:16:4f:
a6:83:e0:3f:44:4a:40:87:c9:9f:51:bd:d7:71:cc:d0:d4:89:
c4:93:73:8f:86:5c:a9:d3:3c:52:5a:85:55:7a:33:6d:a6:13:
fd:0e:c6:8b:af:6c:34:b7:ad:db:26:47:73:4d:13:a3:46:c4:
00:b1:f5:15:5d:24:c7:c0:60:c3:cf:ef:d5:be:8c:31:a0:42:
2d:e6:f4:ff:65:dc:63:cf:81:ac:9c:1c:02:49:00:5e:32:b6:
67:df:e1:79:79:bd:b9:88:11:10:cb:a3:64:5c:8a:a1:8c:62:
f9:5e:f2:48:95:44:70:a3:22:15:62:68:3a:f5:7a:26:8c:f9:
d2:48:02:8e:9f:96:89:f9:06:59:53:aa:f2:74:45:51:55:fe:
8d:7e:4d:68:0b:a9:97:39:cd:2c:1c:1f:cd:a4:7f:57:b9:d4:
e3:51:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:35:35 2025 by rpki-client