Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: mXT+XjBnNe9ZI5/kw7E+xvD0nzBVzou8fuNbnYQGA0I=
Subject key identifier: 0E:E9:8E:F2:71:39:AE:0F:89:AE:B9:C8:66:29:A5:3D:DF:35:1D:96
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 01976D3D813C4F3256AB00BE8DFEA30B5587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 0593
Signing time: Sat 14 Jun 2025 07:00:36 +0000
Manifest this update: Sat 14 Jun 2025 07:00:36 +0000
Manifest next update: Sun 15 Jun 2025 07:00:36 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: TW6MKTgRuZz8tCAgbrspYecrBenIjmmwoc1y1VYXJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:81:3c:4f:32:56:ab:00:be:8d:fe:a3:0b:55:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Jun 14 07:00:36 2025 GMT
Not After : Jun 15 07:00:36 2025 GMT
Subject: CN=0ee98ef27139ae0f89aeb9c86629a53ddf351d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:04:c4:37:fb:1e:b7:fe:3c:87:34:ea:2a:
2d:f9:b0:65:62:c9:36:a7:94:55:3b:ce:97:ec:62:
6d:ec:15:71:46:ef:75:ba:fb:7a:8e:c2:e7:35:fa:
0e:e2:86:21:7d:24:59:94:81:6f:ad:e1:8f:c1:bc:
92:50:b6:fa:cc:f8:81:d8:db:bf:fa:f9:8b:86:74:
18:aa:80:5e:6c:9c:93:bb:1e:c3:06:7c:53:06:77:
d9:0b:c0:c4:2a:db:38:72:72:0c:b2:e5:6c:2a:f4:
19:67:a7:24:c3:04:19:9b:83:84:d9:f9:3c:81:38:
b6:e1:bb:a7:db:78:ad:28:4c:5c:b1:b3:38:05:a6:
02:75:b1:0f:95:9a:69:d8:ab:b6:20:04:1b:5d:6b:
ae:1d:ea:4b:92:72:11:24:40:ef:86:d7:9e:ca:d6:
3f:9b:4b:28:37:4a:0d:6b:c2:48:e5:a1:1f:a7:94:
b6:b3:84:e1:d6:6d:c0:ec:81:9a:e4:85:6e:8d:0e:
91:9d:6f:e4:97:17:ee:0b:46:30:59:75:36:e0:1b:
79:5a:68:3a:c5:f1:16:00:90:e2:8d:48:1f:62:39:
a4:cd:a5:5b:82:89:ff:f1:ad:ea:77:e1:0a:a7:8d:
bd:c9:2d:5b:b9:71:a1:f7:25:44:12:81:9f:f0:f7:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:8E:F2:71:39:AE:0F:89:AE:B9:C8:66:29:A5:3D:DF:35:1D:96
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:f0:c7:83:2d:00:80:b9:e5:48:1b:0d:af:62:12:ca:97:8f:
58:07:23:e7:9e:f3:62:44:27:84:33:60:1b:cd:73:4e:bf:b9:
86:1d:89:0e:3a:8a:fc:6e:e0:18:f0:3b:80:b2:61:a0:95:a4:
4d:28:f9:d5:12:2b:5b:ec:04:7a:ec:4c:37:30:2e:f8:dc:c4:
69:8f:8d:fa:d8:ff:a2:f2:0f:d7:aa:66:aa:15:3d:40:bd:76:
e5:eb:65:48:08:e0:16:15:7d:f0:0b:b0:25:ef:8d:a2:79:03:
d7:8c:99:d9:0c:10:1b:87:d4:41:4d:be:43:8a:04:cf:1a:5a:
8e:1b:2b:c9:95:dd:e8:4f:ef:e6:2e:e1:45:ab:a0:ed:54:b3:
cf:57:15:22:33:2f:bf:be:11:84:e9:f4:9b:14:6a:ae:b3:20:
a0:ff:2f:df:d6:8c:9b:c3:e6:5b:5a:66:d4:21:e7:f7:c4:3c:
e6:d0:92:e5:c4:43:3a:57:3f:1f:12:76:6a:27:59:c8:33:46:
9c:fb:5b:b8:29:54:da:2d:9f:75:1f:51:82:66:de:ab:9d:73:
fb:7b:90:65:f2:4b:ad:90:a9:93:53:a4:ca:4b:72:5f:30:f5:
5e:be:ad:7c:c5:56:38:b3:1e:b9:53:f8:c7:28:4b:11:72:57:
a9:f2:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:11 2025 by rpki-client