Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: CNNppctmmbV4zCvwUzG+FwJtpvOepRlSV+2iZhpw0+0=
Subject key identifier: 50:3D:76:8F:71:91:85:21:A9:78:66:AC:B5:A4:03:B9:05:F6:5C:2A
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 019769618BF40D5E3E0B56E6335C4F885509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 13FF
Signing time: Fri 13 Jun 2025 13:01:29 +0000
Manifest this update: Fri 13 Jun 2025 13:01:29 +0000
Manifest next update: Sat 14 Jun 2025 13:01:29 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: TwQPX7bf+WcFeSdtacYu+dk+ZGJ4H+zNVTpBXM7q5zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:8b:f4:0d:5e:3e:0b:56:e6:33:5c:4f:88:55:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Jun 13 13:01:29 2025 GMT
Not After : Jun 14 13:01:29 2025 GMT
Subject: CN=503d768f71918521a97866acb5a403b905f65c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:ec:8a:f1:0d:ca:30:5d:16:4f:3e:2d:bb:
56:e2:b4:16:04:33:23:35:b3:a1:43:c0:3a:79:88:
cf:c7:f3:3d:c0:f9:c8:ed:0b:b7:c0:28:36:fc:cf:
e9:f4:70:ae:ea:71:c6:2c:88:15:b2:92:8e:3e:86:
d7:db:80:92:d9:22:fa:d9:1b:04:cc:8b:57:c9:5b:
64:37:cc:70:fe:5d:4d:6a:95:46:d5:e6:be:a1:2b:
cf:fc:98:b2:27:f1:34:15:50:0a:2d:5a:1b:62:df:
38:b4:d5:fc:3d:9b:49:dd:dc:eb:5e:30:0c:5a:9e:
17:bd:ef:ac:af:b4:b9:2a:1a:77:20:db:55:0e:d4:
28:47:2f:44:77:5a:3f:05:13:22:a3:76:42:60:86:
a1:81:46:5b:a4:b7:1f:df:15:fe:7d:9b:40:f2:56:
b4:fb:01:a6:34:ae:d3:85:52:cf:3f:ed:15:64:2d:
f9:89:8e:1b:06:06:5e:ee:6a:a7:7e:a0:a4:5b:b9:
00:a4:94:39:65:8a:01:08:0c:e3:ca:f5:a8:19:d2:
42:83:02:a9:2d:21:6d:b2:aa:f9:bc:d2:5c:3c:11:
7a:6f:51:87:27:b0:66:cc:10:89:78:10:20:92:82:
94:32:fd:f3:83:fc:b6:84:43:69:06:29:d0:79:52:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:76:8F:71:91:85:21:A9:78:66:AC:B5:A4:03:B9:05:F6:5C:2A
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:4e:de:d0:04:0a:ab:d4:44:d0:0e:c7:cd:ce:d4:11:04:00:
c0:2b:a7:8d:5f:d8:78:eb:32:ad:80:bc:2d:d3:f7:6e:aa:a5:
d9:87:c6:92:12:6a:64:be:d1:cb:b8:78:e7:c6:be:5a:75:1f:
fa:a2:b2:36:c0:92:d6:50:67:cb:35:d9:84:7f:58:84:3a:fa:
73:94:27:2e:3e:0f:a5:79:75:93:3a:0c:e8:56:d1:51:16:04:
87:05:d6:86:b8:83:64:ab:54:44:5b:03:cf:92:9f:10:b5:5c:
7b:d0:3a:21:dc:6d:9a:8c:09:cf:f4:2d:27:9a:42:30:32:e5:
2d:2a:ba:8f:62:6e:93:a2:ab:2d:d2:7f:1e:71:00:9c:ac:68:
21:cf:6a:fc:fd:9e:b0:79:42:65:96:03:03:35:9e:02:1f:0e:
cd:da:a5:c7:99:d7:2c:af:48:32:b4:e2:44:01:ff:d4:d2:ea:
f5:3d:8c:92:fd:2b:7a:72:f0:09:89:b0:ae:05:77:ae:93:5a:
57:ba:b9:bf:84:92:ba:8c:a0:fa:76:83:77:dc:3c:3f:80:13:
d5:9d:54:0b:5b:65:27:a7:ba:91:88:b3:22:39:bb:54:8e:00:
66:bb:00:1c:a4:a5:c0:ac:39:a0:e8:8e:5f:55:37:f1:c8:43:
16:25:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:05 2025 by rpki-client