Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: ada9jKbSEYYQkWn0HJP2ZIdduKVMvhdPWpqxCu6hRUg=
Subject key identifier: BF:8D:84:01:6A:44:3E:DA:B0:FE:15:36:2A:C3:F1:FE:20:62:7B:1C
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 01976D3E6866E5492624E8D687FA4AA789B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 06AE
Signing time: Sat 14 Jun 2025 07:01:35 +0000
Manifest this update: Sat 14 Jun 2025 07:01:35 +0000
Manifest next update: Sun 15 Jun 2025 07:01:35 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: LatWA25Ef3PFa+gZKa76JssYapTgYl9nTY+NfG8aQlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:68:66:e5:49:26:24:e8:d6:87:fa:4a:a7:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Jun 14 07:01:35 2025 GMT
Not After : Jun 15 07:01:35 2025 GMT
Subject: CN=bf8d84016a443edab0fe15362ac3f1fe20627b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:fb:36:83:94:e0:93:fb:d6:54:6f:d9:e2:
9e:5f:96:d5:8b:40:d0:23:e9:a6:9f:c3:cf:12:01:
d5:a7:43:db:31:ca:43:33:6a:4c:28:77:96:15:62:
62:de:28:0a:11:ad:47:55:5c:32:af:ca:30:bc:0e:
d9:dd:34:9b:20:6c:9a:28:3e:36:95:1c:69:a8:1e:
3b:d6:d4:e6:53:39:13:04:d8:ed:6f:be:04:03:7a:
d4:04:36:06:ef:7f:d2:14:05:6b:d1:18:11:f7:8c:
a9:b6:6a:84:ad:50:5a:77:6f:27:83:1c:12:40:8e:
03:85:2a:07:2d:23:e4:60:fe:a9:1d:15:3c:70:50:
ce:e6:2c:00:86:cf:ab:51:b0:63:d9:e9:b3:1b:f8:
c0:00:41:d0:14:2d:c2:fc:e2:65:35:1e:f7:6e:fe:
92:ce:b7:1b:10:ea:a7:26:2e:96:d8:90:4c:25:93:
2a:3c:12:4d:29:5b:e9:75:1d:05:16:eb:75:68:d9:
49:e1:d5:3f:fc:3d:5d:5f:3f:b6:78:a4:f0:67:19:
ad:cc:31:57:a5:43:bb:d1:a8:b1:02:0f:67:22:45:
b3:3e:12:1e:81:9a:89:be:30:de:0d:47:6d:ae:47:
c4:75:04:4f:17:fe:dc:d1:cf:17:36:3c:e4:de:f3:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:84:01:6A:44:3E:DA:B0:FE:15:36:2A:C3:F1:FE:20:62:7B:1C
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:28:a3:7a:cf:4a:8b:2b:36:95:ac:8b:8c:42:6f:15:99:25:
f0:ef:a8:89:d1:b8:79:7d:fd:a1:6e:b3:dc:81:4d:b8:72:7e:
5b:62:9f:e6:17:9a:b9:c7:86:ce:11:2c:fe:a4:d3:57:b6:43:
7e:d1:54:a2:55:ba:4c:1e:c0:42:3e:5e:2b:3b:2a:d0:e6:6c:
8c:ed:69:36:d4:47:6f:94:c6:72:97:ae:3c:5b:53:ab:68:98:
46:eb:65:28:6b:86:b5:63:6b:da:04:b3:16:68:7d:00:f5:57:
23:45:4d:2f:09:bd:c1:90:98:ad:d1:9c:16:f8:48:3f:a8:a9:
9f:cc:fe:1a:ff:ef:12:a7:70:54:0e:57:48:ea:e7:e1:91:2a:
cd:84:13:5b:0b:bc:c0:7c:3e:e3:94:db:7b:b8:42:23:ad:34:
98:6c:5a:4f:67:58:09:19:67:25:74:69:ff:00:36:17:b2:5a:
7c:73:c0:2e:01:ae:85:83:85:21:cf:d0:3d:37:f0:11:8b:4b:
06:88:53:13:4d:ff:43:44:7b:e5:56:3b:ff:28:5e:ea:26:99:
75:fe:2c:16:20:48:06:ef:4c:a7:e1:12:1f:b6:16:99:1d:0b:
96:45:3d:1d:80:ee:2b:b8:c7:77:78:d2:41:72:3b:d3:79:f2:
0d:3f:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:34 2025 by rpki-client