Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier: 4Si6v8eWaoUjlDRvo6DMxzga4SOQe/rwBTnfjTWwjRA=
Subject key identifier: 68:6D:10:A9:FA:90:36:50:4E:F2:E6:D5:27:53:1B:89:EB:56:D6:ED
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer: /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial: 01977AC210C002A7F1512A916473CAA0D10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 22:00:27 +0000
Manifest this update: Mon 16 Jun 2025 22:00:27 +0000
Manifest next update: Tue 17 Jun 2025 22:00:27 +0000
Files and hashes: 1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: THq94eAyrRCXVn9gL7wPUhSR++orKZ8McRE9S1vw6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:10:c0:02:a7:f1:51:2a:91:64:73:ca:a0:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Validity
Not Before: Jun 16 22:00:27 2025 GMT
Not After : Jun 17 22:00:27 2025 GMT
Subject: CN=686d10a9fa9036504ef2e6d527531b89eb56d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:bc:74:6d:eb:73:c4:86:d2:2a:00:41:75:
f9:94:8a:38:fb:e5:5f:c0:c7:03:c7:09:fe:05:d7:
a0:ff:aa:03:22:cb:19:80:ae:05:0c:ba:b8:68:cc:
96:73:f7:bf:3f:4d:ee:61:d3:b6:ce:da:36:57:39:
04:59:88:a4:09:d1:f9:71:8d:63:69:88:c5:75:25:
db:d2:37:99:a0:85:cf:79:bb:38:8a:42:2b:d1:6a:
be:d8:83:b9:7d:55:18:2b:85:85:3c:21:6e:5a:be:
9a:93:e3:ab:93:4d:f3:2c:07:31:74:02:28:8c:34:
4a:08:8b:cf:29:4b:45:c2:54:04:fb:c4:a9:9c:53:
a3:2b:ce:aa:8d:2a:37:58:2c:f9:17:06:ce:e5:70:
22:ac:48:82:de:f6:1f:48:1d:a6:b2:d7:9c:d9:52:
3b:fc:1a:17:07:d7:71:5d:6f:9f:62:f1:0f:ea:3d:
4d:6e:e7:6c:2a:e2:9b:cf:c1:79:66:6e:b4:10:a2:
ea:84:22:ff:28:d8:9d:42:27:47:36:00:f8:0d:a1:
80:d1:78:9d:be:4c:ca:34:a3:9c:c4:91:38:e6:cc:
31:76:c0:71:8d:2f:3c:90:52:4e:72:cb:1e:7f:f2:
fd:69:af:fe:0d:4d:17:38:d0:fa:10:7b:1f:1f:b9:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:10:A9:FA:90:36:50:4E:F2:E6:D5:27:53:1B:89:EB:56:D6:ED
X509v3 Authority Key Identifier:
keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:00:70:db:7e:2d:50:96:c3:d5:5e:f6:95:6a:ac:17:45:
b4:0b:54:9a:4b:12:5f:4b:e4:79:1a:63:f2:e4:96:4d:c4:4a:
96:75:04:8c:60:81:e7:4c:e8:89:b3:e6:a6:20:79:6d:f2:81:
46:51:a1:56:03:bf:92:b9:47:18:d9:27:74:a2:56:ad:e2:2f:
40:97:9f:7f:16:6b:f0:1c:4c:ac:9b:6f:ca:c0:51:23:89:f5:
31:ab:de:18:88:b5:ca:56:3b:65:95:c5:4f:c9:64:01:a8:fe:
80:5c:72:17:ed:d1:61:d3:ee:0c:46:d7:5d:ef:98:a3:ff:75:
b7:ca:3f:06:13:9c:ce:f0:a6:66:53:0b:55:8c:75:d8:00:aa:
45:95:2b:41:2a:4c:66:3d:8a:84:20:b3:15:12:a7:81:58:b1:
de:2d:20:f9:bf:c7:9c:88:6d:1a:20:38:88:ac:c1:8f:9e:37:
77:2e:a6:eb:15:5c:31:9a:df:36:e3:76:c0:30:9c:53:3d:b8:
27:f1:91:af:3c:26:09:0f:38:96:3d:57:37:f4:e6:c3:31:ab:
52:61:3e:bf:69:27:08:8c:79:93:1b:bf:e9:c2:9a:21:9b:7c:
2b:d4:ca:23:f3:74:a6:fa:0d:8f:57:e8:ad:c7:92:e3:95:ff:
70:18:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:59:14 2025 by rpki-client