Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: sha7fTHliFOkKoUDWHQbrTK62LKkjGk5qEUHl2AyLYY=
Subject key identifier: A1:98:D7:C2:9D:79:B6:5F:CD:76:38:FD:CC:7D:6F:62:7E:26:07:69
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 019772D1D203EBD61FADCC0D4020E11EB4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 0488
Signing time: Sun 15 Jun 2025 09:00:42 +0000
Manifest this update: Sun 15 Jun 2025 09:00:42 +0000
Manifest next update: Mon 16 Jun 2025 09:00:42 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: X0fYbZOALfKIx9faZD1MFraiZT2JRbAovI+umAxnbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:d2:03:eb:d6:1f:ad:cc:0d:40:20:e1:1e:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Jun 15 09:00:42 2025 GMT
Not After : Jun 16 09:00:42 2025 GMT
Subject: CN=a198d7c29d79b65fcd7638fdcc7d6f627e260769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:10:36:6d:ed:0f:f0:7b:9a:38:94:44:ef:
ef:18:6d:db:e7:7a:df:cb:d7:83:1f:f3:47:ed:8c:
ac:10:3e:f1:8f:4b:88:3c:cd:e4:1d:d6:23:f6:09:
a4:00:b3:6e:b2:fb:51:03:50:f4:7a:e9:c1:0e:6d:
54:ac:a0:5e:bf:cf:54:6e:e8:77:a5:35:44:d4:01:
be:e9:ea:b9:89:4b:1d:4d:ce:e8:93:38:8e:92:c6:
1c:90:44:87:b2:8b:6e:6c:81:e2:df:d0:6a:90:1c:
fa:12:bb:78:0c:06:14:e8:c8:ce:94:31:77:6d:05:
68:e3:7e:a3:9e:f1:78:8c:e5:97:d6:a4:32:2f:33:
bc:a2:e3:5d:20:53:59:1d:82:a3:e5:b7:d7:fe:91:
2f:b9:0c:ef:a2:15:cd:1d:f3:9b:d1:7b:f8:38:d9:
19:b5:07:3a:58:47:6b:6f:56:4e:54:19:5b:47:dc:
69:58:3f:81:3c:41:63:c4:49:fb:04:0e:21:0a:83:
9b:77:70:6f:a1:36:43:6d:a9:7b:c4:db:ce:c2:59:
4e:04:61:c1:3b:18:90:30:59:22:bc:82:84:a5:45:
a9:ea:00:ad:9c:80:b2:fa:69:ed:24:9b:4a:74:8d:
e4:19:fb:45:a7:45:d4:8f:be:7a:c0:50:70:ec:d1:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:D7:C2:9D:79:B6:5F:CD:76:38:FD:CC:7D:6F:62:7E:26:07:69
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a0:a8:f0:5b:c3:45:97:b5:74:04:d9:db:45:97:af:36:ca:
d7:83:f2:b8:c0:e3:81:8e:d7:16:b2:48:f8:38:be:8c:d0:75:
06:35:e7:51:07:d4:4f:e2:e6:42:cb:25:58:b3:aa:02:30:8b:
fd:da:9b:8b:e0:e8:ee:af:56:83:aa:48:44:be:d6:db:dd:2e:
35:52:c0:2c:a7:7d:e0:72:70:63:b7:fa:a7:51:fc:9e:32:e7:
33:7f:79:5f:e1:29:d4:01:06:17:1d:f0:a9:a5:cb:3b:5e:f5:
17:e7:e2:ec:67:7a:f4:a4:09:82:59:8f:68:5d:b1:1e:49:2c:
ab:89:69:e4:c5:21:f1:8e:a7:7c:d0:6e:ba:e2:e9:92:17:e5:
cd:92:d0:47:0d:d8:f8:93:ed:4f:c8:80:ad:fc:9f:aa:ea:eb:
a4:2d:b8:e9:20:a4:60:11:4e:0c:3a:86:62:63:d1:58:d8:a7:
b3:5d:10:13:ce:76:b3:d3:d7:44:13:99:b6:bb:dc:9d:3a:9b:
de:be:d7:b3:56:1e:e1:41:b4:4b:6a:ad:96:9d:be:dd:2c:21:
a8:0f:c9:96:b5:3b:5a:32:6b:78:ac:76:7d:20:1e:d3:69:e4:
47:61:82:de:47:b9:72:55:f7:70:9c:b3:0b:13:7a:6e:db:ea:
93:5d:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:32 2025 by rpki-client