Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: kVWu4VFbAxQ7F9zAf3TnvK8+2SkhmaspArXY/ywGkDU=
Subject key identifier: F8:A6:F8:D0:4C:28:22:36:D2:71:3A:68:74:B3:24:22:37:81:DB:4D
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 019779AFC9E1220D757970BC27EB3EB9F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 10D7
Signing time: Mon 16 Jun 2025 17:00:52 +0000
Manifest this update: Mon 16 Jun 2025 17:00:52 +0000
Manifest next update: Tue 17 Jun 2025 17:00:52 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: P2shCtUYnefI/KV6tz31NgyloissJRb18UMlux+Tzqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:c9:e1:22:0d:75:79:70:bc:27:eb:3e:b9:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Jun 16 17:00:52 2025 GMT
Not After : Jun 17 17:00:52 2025 GMT
Subject: CN=f8a6f8d04c282236d2713a6874b324223781db4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:3a:03:1b:64:0d:98:a2:6b:81:7b:ff:c2:
ad:c9:45:1b:d8:49:b8:1b:58:ac:d9:10:e4:8d:6d:
64:9f:88:de:16:ff:07:34:75:d6:9f:07:0b:a9:6c:
8e:49:37:38:4c:4d:3c:75:6c:ed:14:c5:8d:bc:d3:
b3:4f:14:bd:c7:55:6f:69:2b:67:2a:01:9e:52:da:
81:ed:7a:39:0e:04:32:2d:67:ac:12:35:4e:19:d8:
d3:8f:0c:9a:8b:6e:2c:df:19:9b:98:3c:34:7e:36:
10:72:1b:b5:30:03:c3:47:33:e7:41:54:47:4a:87:
94:3f:7d:d9:d2:02:b8:ba:73:c9:44:b1:09:55:04:
77:4f:18:6f:1a:58:a7:3d:b2:92:e6:5f:08:16:7b:
b4:04:ca:85:0f:54:d8:13:4a:2a:3a:d5:e1:33:ac:
d2:8d:26:52:ab:d7:00:5f:0c:4c:90:43:37:e2:a1:
2c:33:5c:a2:b9:52:81:74:2d:1f:c9:68:03:be:53:
fa:d0:21:8d:2c:80:c4:d4:c9:2b:96:fb:65:ee:af:
11:90:ef:47:f8:41:d4:40:da:84:ee:94:5e:58:83:
b7:42:71:01:fd:18:bc:dd:33:e7:a1:79:85:d7:82:
a5:d6:ce:75:11:c8:00:43:09:f1:74:ae:1c:94:7c:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:F8:D0:4C:28:22:36:D2:71:3A:68:74:B3:24:22:37:81:DB:4D
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0d:c4:e1:e8:23:33:c5:d9:16:12:11:7b:52:a0:7b:46:d6:
48:f6:20:23:e6:51:9d:85:de:5b:a0:ae:c1:e8:52:21:c3:ac:
97:70:fc:84:ca:dd:cb:85:af:d2:cf:58:5e:93:39:c1:34:e4:
2d:e6:a2:52:ef:65:9d:fc:e9:27:e2:52:aa:83:c8:48:dd:5d:
5c:f4:94:79:fa:54:19:b1:86:bb:56:45:62:7a:74:c4:20:f8:
e1:72:01:0d:84:54:ce:a7:d3:5d:8f:5a:ce:bc:99:3e:da:8e:
36:af:76:bc:e1:b9:5a:51:c5:38:49:3e:c4:85:a9:a9:03:d9:
d7:14:3f:be:88:76:56:90:64:75:d2:87:d6:11:3b:f2:49:94:
49:78:57:57:27:c6:03:f7:69:b7:0a:ea:4c:b8:0a:19:d8:ec:
99:42:2d:7e:3f:a6:7b:5e:8f:7a:3c:91:18:d3:3f:87:0b:4f:
56:1d:d3:44:1e:1f:81:f7:35:53:b8:3f:0d:c4:ba:d0:5f:ed:
e3:12:27:02:8a:53:0a:cf:43:ba:fa:97:54:7e:30:77:d3:75:
0a:06:2d:bd:6f:5c:56:2a:40:88:20:a5:10:ae:82:6a:da:be:
7b:f4:77:b6:f6:f2:7a:04:8f:c8:7a:df:de:0e:75:a0:a8:b4:
65:c9:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:39:54 2025 by rpki-client