Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: 6iZK2e+4JBcRyG/J//1GYWxSFLoum3cedi8rJrXeK7c=
Subject key identifier: 29:15:9E:F5:60:61:BA:74:85:60:2F:59:DE:7B:CE:FF:A0:08:6B:76
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 01976FD0F9D990A748F37A63DF574714519D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 19:00:55 +0000
Manifest this update: Sat 14 Jun 2025 19:00:55 +0000
Manifest next update: Sun 15 Jun 2025 19:00:55 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: BaY2sDrfcSUaRKudALCHWZt9Y7hCN8L54egWSfnffZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:f9:d9:90:a7:48:f3:7a:63:df:57:47:14:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Jun 14 19:00:55 2025 GMT
Not After : Jun 15 19:00:55 2025 GMT
Subject: CN=29159ef56061ba7485602f59de7bceffa0086b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:3f:8a:3b:6b:68:dd:9e:bd:0c:2e:75:e4:
f6:7b:90:fe:d1:89:7d:a0:7d:d8:c8:a4:a9:ba:4a:
a3:4f:1f:bb:b1:a8:e0:0b:32:91:82:98:bd:25:3e:
d2:4a:c2:74:63:41:a6:68:06:57:33:35:0e:fe:da:
c6:fd:70:c9:00:9e:f9:bf:55:29:14:da:09:64:fa:
4e:7b:5e:48:61:42:c9:fa:19:61:d3:1c:84:29:76:
63:88:26:22:0a:9f:f4:db:7f:ec:45:c5:c8:fa:1f:
a0:fa:eb:11:3d:e5:e7:6f:d7:71:85:fc:fd:4f:8a:
95:ae:01:aa:cd:0d:cd:2c:df:4f:19:44:96:17:24:
cf:8a:cc:11:39:39:89:ca:df:78:78:51:4d:cc:2e:
76:9f:a4:49:23:87:23:48:fd:55:39:99:11:39:ac:
45:15:dc:81:e9:b7:27:a3:99:a0:26:32:b0:64:7d:
32:c5:a6:c8:37:cc:95:02:11:1e:28:a0:36:5a:ad:
2c:91:42:8d:1d:3b:98:b3:d4:4e:9e:41:c8:9d:ab:
dc:49:d3:cb:d8:9a:13:f1:18:b5:88:b1:5b:a3:1f:
c7:e1:6f:b3:4d:75:a9:72:3a:21:bc:aa:24:8c:c6:
96:72:b7:1d:76:bb:52:36:33:da:2f:3d:d2:d8:f4:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:9E:F5:60:61:BA:74:85:60:2F:59:DE:7B:CE:FF:A0:08:6B:76
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a6:5a:c5:b4:01:a1:1f:8b:ec:f2:a0:34:46:e2:5e:a3:fb:
c8:24:bd:6c:42:24:79:8d:69:12:b1:36:73:7a:cd:36:32:ed:
bf:64:bf:99:22:3f:71:d6:a8:47:97:cf:9b:26:b8:f6:eb:fa:
02:e1:2e:8d:8c:d7:da:7e:35:31:aa:72:ab:3d:47:e9:df:14:
ec:1d:78:f6:3f:0e:52:8f:d6:45:f4:75:a8:4d:6c:af:34:fc:
8e:14:f4:9d:d7:9b:5e:a2:35:be:2b:eb:30:5c:bc:4e:30:58:
87:e2:00:52:1f:ac:ab:1f:c0:ef:c5:c3:eb:73:eb:d5:a8:15:
45:fa:49:c9:24:82:da:b8:2d:c0:0d:aa:e3:55:d1:ab:2f:32:
a7:5d:62:39:f7:58:8e:a6:0f:1b:2d:d6:bf:c6:80:75:42:15:
0f:27:00:96:fa:77:4e:aa:0b:14:9e:50:c7:71:ce:92:46:68:
04:5d:29:e7:ec:6f:fc:e8:f4:fe:0a:92:5d:04:be:bc:02:50:
f3:92:ae:cc:7d:11:48:47:36:32:a1:16:bc:6a:bd:6e:46:8a:
e6:10:4b:b9:1f:ac:dc:a6:b2:df:73:a5:61:94:3c:49:d3:9f:
e7:e4:a1:1e:21:59:ed:7e:b6:26:7f:b0:95:43:74:1b:e3:b4:
e6:13:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:31 2025 by rpki-client