Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: +iDOGinLxL+Y+SR8C5CiTCnkNxDziZroJF0Bp/8s7qU=
Subject key identifier: D4:6A:14:A4:9C:26:B1:AD:A0:4A:78:BB:41:F0:C8:6F:43:05:A6:2D
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 019768BC4B026D633C12CDEA9D0C8CF5EA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 115B
Signing time: Fri 13 Jun 2025 10:00:59 +0000
Manifest this update: Fri 13 Jun 2025 10:00:59 +0000
Manifest next update: Sat 14 Jun 2025 10:00:59 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: fM86yc+4hxjy3EOXeDWH+fu7xBy3hFqP7+u88G1O4WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:4b:02:6d:63:3c:12:cd:ea:9d:0c:8c:f5:ea:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Jun 13 10:00:59 2025 GMT
Not After : Jun 14 10:00:59 2025 GMT
Subject: CN=d46a14a49c26b1ada04a78bb41f0c86f4305a62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:46:e3:19:ea:65:f5:dc:59:cf:7c:05:5b:
40:13:86:e0:c8:c2:b3:86:86:30:d2:56:79:3c:da:
78:e9:e6:cb:d7:5c:18:97:c3:87:8a:c2:17:a3:5a:
e1:b5:a5:67:e0:35:81:8a:51:e7:02:05:a1:fe:34:
c5:c5:1a:6c:b9:bf:66:91:33:79:41:0c:f5:98:39:
a8:a7:50:5a:7d:2f:a3:bd:be:5f:62:ed:fa:2d:22:
7c:58:57:02:f7:25:18:ef:7d:12:21:25:e8:40:e9:
4a:1e:5d:d8:a1:46:5e:ae:ec:6a:04:52:0d:7d:c1:
30:53:4f:f8:96:4b:96:4e:d1:dd:11:6a:da:e0:12:
d1:73:f2:16:09:48:88:ca:18:56:bb:89:c1:21:bf:
08:26:0b:ef:f2:26:3c:bd:f8:e6:0c:de:2d:af:7c:
2b:49:9b:b6:ff:32:b3:5b:22:c8:56:f9:53:01:5c:
b3:e2:7a:89:57:f9:91:43:eb:94:75:11:88:d0:3b:
99:9b:1a:55:3c:2f:69:65:b3:a3:db:1f:4f:81:52:
1a:f4:b4:43:8d:d7:c2:53:13:02:a1:00:7b:d3:e7:
f5:8f:af:0b:62:76:8f:1f:59:a9:c0:d0:4d:3d:ef:
ed:09:77:a0:2e:9a:8e:96:16:f8:c3:ab:c1:24:ca:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:14:A4:9C:26:B1:AD:A0:4A:78:BB:41:F0:C8:6F:43:05:A6:2D
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cb:66:1f:d4:ac:ce:49:b4:c2:6b:15:31:af:ba:8d:23:19:
2e:39:ae:e0:25:53:ce:53:4c:0c:28:79:c3:b4:eb:af:a8:a6:
6b:9d:9d:c3:d4:d2:39:97:c3:c8:e0:6a:8c:fd:d8:89:c4:be:
19:45:39:59:c3:a8:35:0e:d0:07:d6:02:6a:da:10:cd:c4:f2:
cd:81:3c:b0:c7:99:f8:5c:48:7e:c2:81:65:fe:bb:83:6f:f1:
7f:c9:f1:7d:e1:36:bc:08:bd:22:6a:e7:36:90:79:22:cc:0a:
a3:36:3a:f0:35:fc:1d:bd:95:85:cf:85:1e:29:78:e0:12:da:
97:e7:93:02:c3:03:7b:c0:20:31:20:39:ef:ea:bd:66:fe:0a:
3b:60:bd:54:5c:62:77:9b:94:28:06:29:5c:3f:7e:93:2a:2e:
7c:b8:06:be:a2:a2:18:af:47:a8:35:3a:25:3a:a6:11:f0:00:
65:75:f4:ac:44:1b:66:c0:b9:eb:9d:ea:aa:d3:60:37:56:8f:
c7:b3:62:6d:6b:9e:fa:b8:bc:71:77:0d:8c:9c:08:1b:ce:f9:
3a:79:f4:da:57:58:62:33:59:6b:d2:c7:5b:d7:fc:d9:ad:7d:
fb:da:34:d0:46:06:55:c7:97:0e:b7:62:1d:8e:b7:ac:ef:ef:
e8:29:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:16 2025 by rpki-client