Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: Xj8XW33LV9Nc7CBp682ze5hTtr1KV3PrjPoImI8QHvc=
Subject key identifier: 75:8F:0F:15:C0:DC:0A:46:4D:63:D3:9B:37:8D:22:6D:3C:90:7B:06
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 019770757928EC8C23DE951DB1CE8BBDAD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0D7A
Signing time: Sat 14 Jun 2025 22:00:36 +0000
Manifest this update: Sat 14 Jun 2025 22:00:36 +0000
Manifest next update: Sun 15 Jun 2025 22:00:36 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: VMY+3SS/lNJtvptvlrhlYwzKlL0y+PHWv5cqEXxou6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:79:28:ec:8c:23:de:95:1d:b1:ce:8b:bd:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Jun 14 22:00:36 2025 GMT
Not After : Jun 15 22:00:36 2025 GMT
Subject: CN=758f0f15c0dc0a464d63d39b378d226d3c907b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:83:a8:e4:90:d1:01:0f:a2:66:d0:22:94:
fc:cf:43:e3:86:83:53:bf:3f:61:a4:8e:50:de:61:
aa:87:6a:ec:ab:da:76:ff:93:ea:d5:99:3b:58:0c:
15:74:0a:52:da:ec:28:6e:4d:39:ff:cf:be:32:88:
72:87:18:07:3c:76:d2:79:8e:a8:83:09:79:06:44:
8f:0a:3b:48:55:a0:d9:9e:05:51:76:01:0b:3f:30:
bb:3f:61:53:72:b2:fb:82:c9:f7:ae:d8:4e:99:82:
c7:e0:dd:e4:43:06:95:df:b6:67:21:ea:fb:32:eb:
aa:46:aa:d2:ef:4b:d1:20:57:7e:9c:13:a9:d8:99:
3f:f5:c2:2b:7e:2b:b4:ed:d0:35:9e:ca:98:4a:9b:
bc:0b:ca:82:4c:7a:15:5a:7d:b4:f4:0a:60:87:2b:
d0:8e:b3:73:e1:6e:1d:46:1e:c1:4d:ce:33:f9:8c:
5f:0e:eb:08:14:b0:67:7a:61:57:5d:7f:66:8f:c0:
d0:31:a9:e8:68:92:f8:5e:0b:c8:b4:8d:ba:02:a9:
27:1f:71:26:3b:c8:f3:3f:dc:6a:22:13:05:51:98:
a8:32:0f:00:37:39:8f:4e:1b:fe:f5:08:68:4b:9d:
33:e2:94:c8:5f:30:33:ef:66:3e:e8:4f:71:1a:14:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8F:0F:15:C0:DC:0A:46:4D:63:D3:9B:37:8D:22:6D:3C:90:7B:06
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fb:06:64:d9:12:3f:db:1b:12:e0:29:f0:3f:fd:44:b5:97:
1c:91:00:9d:f5:a8:e3:4a:f9:26:ed:c3:36:31:80:76:e6:a0:
d1:18:00:de:18:a4:06:fe:d5:5d:59:3f:97:58:ef:48:22:31:
57:88:8c:7f:0b:94:09:48:c3:62:05:31:6e:71:4d:db:fe:18:
80:9a:ff:91:0c:cd:79:4f:0c:a1:01:45:46:10:5a:20:c1:a8:
49:84:0c:cf:21:98:84:b5:f8:fb:6c:56:af:70:95:b9:02:8a:
88:8c:a6:41:93:32:7a:67:68:55:06:25:38:39:98:9b:61:47:
53:40:43:38:64:9e:82:d5:90:f0:61:52:0b:cc:77:38:79:58:
20:a3:17:40:db:68:80:0e:69:d7:dc:8a:c5:8d:e9:eb:d5:31:
49:0d:a8:51:6e:cc:24:e0:7b:8c:a9:ce:fb:56:e0:c0:c5:e5:
30:35:36:c6:4d:00:c1:c4:55:8e:7c:3a:87:96:6f:8b:2e:30:
66:93:46:6b:f1:a1:59:89:e8:13:11:23:1a:ae:ff:b6:8c:f5:
f5:3f:2f:f3:66:38:eb:81:3f:f0:42:6d:6d:02:1d:b9:59:a2:
e3:b9:ad:5b:38:af:b2:45:45:03:33:8e:d8:3a:95:7e:5c:00:
9d:66:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:34:38 2025 by rpki-client