Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: g/Cg/4r8r9O0r9WCk8D48IkwvYfjswoaWpFFUqgwA58=
Subject key identifier: 8E:99:6B:96:71:9D:AE:F1:3D:E0:14:2E:05:03:75:D0:17:3C:BD:34
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 01976E8707FFABD572E01CCAEAC708E939B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: E1
Signing time: Sat 14 Jun 2025 13:00:32 +0000
Manifest this update: Sat 14 Jun 2025 13:00:32 +0000
Manifest next update: Sun 15 Jun 2025 13:00:32 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: EEWj3hFN5fWikhGCriRQu1IVNRXEU4Q1s2553h1Fo0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:07:ff:ab:d5:72:e0:1c:ca:ea:c7:08:e9:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Jun 14 13:00:32 2025 GMT
Not After : Jun 15 13:00:32 2025 GMT
Subject: CN=8e996b96719daef13de0142e050375d0173cbd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:91:96:d7:19:e3:bf:83:10:08:cd:d2:b8:
f2:ec:0a:41:54:f6:46:5f:84:85:bb:57:15:94:62:
a0:f9:bd:6f:2f:50:06:e8:ed:59:6b:d4:fa:59:34:
d1:4e:01:9a:1c:ca:d2:4a:50:63:de:ef:30:e3:63:
e5:68:00:02:b1:5e:55:96:8e:d8:97:69:9e:d8:2c:
39:08:9a:dd:3b:10:9f:20:5d:74:2a:c2:34:69:15:
b4:e3:d7:20:76:6b:41:b3:f0:39:39:ab:83:08:20:
08:e8:69:09:a0:5b:0e:57:6d:0a:8f:d5:5b:62:d0:
78:76:59:1b:ac:1e:5d:e1:f3:68:aa:86:82:c4:62:
7d:f4:88:69:b8:3a:58:80:72:20:7e:21:4c:03:78:
c4:ac:0b:18:78:78:d3:86:b6:96:3c:7c:3c:ba:15:
e5:d6:67:89:0f:33:f0:cc:1e:6e:b0:4a:e9:8c:fb:
68:10:4a:bb:d2:95:a0:e2:72:62:e1:31:59:ed:42:
07:81:42:58:b6:04:e0:d2:0f:8f:45:56:94:d1:55:
6d:73:c0:ec:fe:3e:71:99:3f:84:74:92:2b:78:30:
58:8a:9d:20:14:3a:9f:a6:b1:0d:c6:7d:3d:9d:62:
a4:a1:23:42:62:be:3e:94:34:7c:5c:15:a2:6e:2b:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:6B:96:71:9D:AE:F1:3D:E0:14:2E:05:03:75:D0:17:3C:BD:34
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8e:48:9c:1a:a4:9a:75:a8:58:e8:3a:0d:8c:0f:b7:c0:1c:
c9:5c:5a:d6:f2:c0:a1:82:0d:e5:88:45:42:a1:a4:67:96:ce:
53:5d:40:31:6f:69:16:12:e4:5f:93:29:d4:7c:d1:1c:d1:ae:
af:51:32:30:af:25:a1:72:76:3d:7d:40:f1:1f:55:73:9f:01:
e0:a1:10:82:3e:09:73:7a:a9:2f:bf:a3:8f:b9:c1:33:2e:7b:
93:80:9b:94:cb:e1:23:df:f2:96:b4:ae:36:9e:48:3d:ba:28:
d8:bc:22:b1:72:93:a1:d7:29:52:6a:26:b7:10:61:fa:12:51:
86:00:ef:90:04:21:2d:bc:8b:54:7a:45:cc:ba:88:b9:1d:bc:
bb:43:73:4b:fd:97:5b:ed:15:e7:87:a2:29:f8:0a:5c:2a:19:
71:6f:e2:4e:9e:3c:a9:8f:b9:b5:8f:f8:4a:ef:4f:96:4d:a4:
95:f2:ac:98:c8:a1:13:74:c7:3f:fd:27:70:90:bb:99:1c:74:
32:d4:56:ea:10:5b:89:df:d9:93:95:c9:a5:38:57:18:ad:6e:
ee:98:fa:f8:a9:b7:83:0b:a9:69:53:fb:be:7f:2b:8d:fc:db:
4d:f9:4c:d2:3a:fd:d3:b3:d7:82:bd:7a:06:98:10:be:af:a8:
1d:57:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:30 2025 by rpki-client