Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
File: jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json)
Hash identifier: cNPmmKsQinggi3uvRixeTRa9QSzm+y/1Z/MErD/r/Mk=
Subject key identifier: 33:FE:76:2B:18:87:3E:06:DB:DF:CB:BD:9C:75:AC:AA:2D:67:71:63
Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Certificate issuer: /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Certificate serial: 01976F2CE52A8089CDB27984DB65B7FA9222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:42 +0000
Manifest this update: Sat 14 Jun 2025 16:01:42 +0000
Manifest next update: Sun 15 Jun 2025 16:01:42 +0000
Files and hashes: 1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: m3nIwy1OasK2JbvibSIIucobAktKra8/wmHpBiC2eeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:e5:2a:80:89:cd:b2:79:84:db:65:b7:fa:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Validity
Not Before: Jun 14 16:01:42 2025 GMT
Not After : Jun 15 16:01:42 2025 GMT
Subject: CN=33fe762b18873e06dbdfcbbd9c75acaa2d677163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:46:39:d2:bc:c9:66:ca:e7:95:2c:18:5b:
cf:4d:fe:22:7d:23:4a:f7:fd:bb:18:10:8d:48:aa:
78:a0:ed:8b:c1:1e:a6:ba:d8:33:c2:97:b5:c1:48:
b8:d1:99:d2:14:3b:b5:8d:3f:84:c9:18:01:e0:d4:
66:78:ee:ae:19:be:59:38:a5:b8:3c:83:65:4e:66:
4b:b1:35:82:95:cf:07:e9:21:a9:92:91:9a:57:43:
57:b9:25:12:51:bb:36:9b:a3:cd:32:d0:32:b1:03:
d3:f4:8b:f5:89:67:03:8f:ee:13:57:c3:d7:f8:5c:
af:48:c3:95:be:2f:01:e2:6d:d7:cb:ef:f6:8b:1b:
dd:4a:ec:56:0a:da:a8:bc:db:47:0c:35:c8:97:fa:
46:6c:f2:88:cf:c1:62:5a:5c:b4:ae:c7:21:68:fd:
2a:c8:3b:ca:11:97:8d:f7:8c:7c:ee:4f:d7:40:bc:
19:ed:e1:41:3d:cd:27:a6:1b:c2:05:15:77:d5:c9:
cb:e7:a3:c3:61:08:e7:50:48:4f:61:59:92:bf:33:
bf:74:6d:38:e2:2e:4c:7b:5a:17:4b:34:5f:ee:a4:
f3:20:81:38:87:bb:a2:fd:aa:d8:ca:a8:fa:ff:b9:
d2:ee:0a:d2:37:46:37:65:b7:16:5e:b5:19:1b:6b:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:76:2B:18:87:3E:06:DB:DF:CB:BD:9C:75:AC:AA:2D:67:71:63
X509v3 Authority Key Identifier:
keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:3c:a2:33:05:04:8d:5b:ed:29:0a:1a:20:1f:4a:70:4f:
a7:da:b6:53:30:b8:6d:0c:e0:7c:6f:8b:13:53:8b:ec:7f:86:
4e:40:89:5c:f0:61:fb:e9:79:05:26:57:2b:0b:a6:cf:8d:6c:
14:10:40:ab:51:b1:f5:e3:cf:41:17:ce:17:c7:22:a5:9f:05:
7d:b5:ff:af:f0:00:c0:bb:01:41:5d:c0:d5:97:91:c3:23:ac:
48:cb:de:1d:04:b1:3f:09:f7:b9:87:76:a8:d5:43:37:4a:6a:
fc:9c:82:9c:51:cb:c8:21:33:0e:90:a7:e8:7b:74:a4:9c:de:
3e:7f:15:d5:ca:35:d7:ea:40:8f:40:a4:9c:c2:19:f4:d2:76:
7c:89:53:be:0f:92:3c:7e:04:fd:bd:66:10:48:bf:91:9a:eb:
04:3b:54:85:16:3c:2e:68:a1:3d:1f:23:d0:38:b4:73:51:60:
a0:17:e1:82:eb:7c:40:50:51:f1:6d:4e:fe:4d:94:d9:5a:b8:
5b:af:89:14:c6:c7:30:a9:7c:f4:12:a9:e9:3f:10:3b:69:da:
1b:5a:98:e7:e9:da:8b:45:d5:27:80:33:3d:cf:62:d9:c7:7e:
70:15:55:29:2f:31:56:58:cf:8e:81:a7:3a:00:f4:3e:ca:5c:
fb:72:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:16 2025 by rpki-client