Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: OKN6PeElZdHL071GSrzQlImo2zIm7GnuHKEk7BsvWME=
Subject key identifier: 50:07:DC:18:8B:F5:6B:26:3B:C2:AC:C0:81:16:28:23:7E:07:8D:4E
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 01976D3E40CAC4A746436A876583A7304995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 07:01:25 +0000
Manifest this update: Sat 14 Jun 2025 07:01:25 +0000
Manifest next update: Sun 15 Jun 2025 07:01:25 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: O3w3/gdusSyvORsa0dEfXaMTcuCeGpcCtWL/zOgxj24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:40:ca:c4:a7:46:43:6a:87:65:83:a7:30:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Jun 14 07:01:25 2025 GMT
Not After : Jun 15 07:01:25 2025 GMT
Subject: CN=5007dc188bf56b263bc2acc0811628237e078d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:ca:5f:17:b3:da:66:80:fd:d3:18:68:ed:
0f:ba:ff:24:ac:0b:51:9f:79:5d:96:22:f0:65:a0:
95:c8:64:2a:13:55:b2:91:a6:ca:2f:1d:a6:b8:77:
34:3d:0d:68:9e:ca:25:1f:7e:f1:d8:e1:1a:3e:e1:
46:18:cc:4e:ae:7b:2e:d8:7e:71:1d:be:54:64:2b:
dd:71:c3:40:64:92:a3:f8:69:12:b3:25:a9:af:9e:
8a:4e:77:6f:8a:26:bd:c5:3d:a6:cf:d4:37:24:ab:
fa:80:b6:ae:27:53:f2:6d:ec:db:27:38:a9:a3:0a:
de:0e:10:24:94:81:b9:26:52:be:16:73:7b:19:b3:
1b:5f:1f:67:27:0f:dc:c4:1a:c5:c1:9a:c0:0e:35:
f2:33:06:87:f1:9e:c4:27:51:b9:2e:51:8a:f4:c2:
65:2f:da:4e:a0:2c:11:44:d7:24:9c:ed:b3:0b:5e:
9d:ab:ab:e8:02:98:25:1f:08:f4:65:6e:a3:4e:c7:
e6:2f:99:22:4b:2c:9f:d4:11:10:bd:b9:26:cb:d7:
e2:66:f4:09:13:17:69:60:0e:1a:2c:49:d3:39:d1:
f5:2f:50:80:d7:4a:50:3f:76:f0:a0:c0:48:54:2f:
f6:79:f2:a5:ec:28:67:db:18:bf:d1:dd:cb:33:ba:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:DC:18:8B:F5:6B:26:3B:C2:AC:C0:81:16:28:23:7E:07:8D:4E
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cd:17:a1:fe:02:11:e6:d0:e2:12:d3:eb:cb:9b:19:13:36:
35:de:a4:e9:8c:1d:6b:74:60:d6:ab:70:0a:b1:d0:93:40:3d:
4f:3f:40:e0:2f:09:5b:b7:55:cb:51:c9:3e:90:b7:de:4c:45:
bd:ea:02:1e:ff:d5:6e:57:42:a7:f1:42:1d:65:b8:31:ad:d4:
90:9a:92:c8:76:2b:1e:63:87:b5:b8:66:b6:d0:5e:34:05:72:
d8:3a:dd:39:e2:95:8a:13:bb:26:0d:07:97:7d:49:5c:53:d2:
c5:70:4b:dc:ae:83:bd:55:52:98:a7:f7:0f:03:49:d8:df:38:
18:64:49:26:c7:da:c7:9b:4d:48:6e:4e:3d:69:e2:1f:81:f2:
95:3d:2b:04:19:3d:d9:b5:e0:18:fc:94:58:81:71:2c:ce:bc:
13:65:7f:9f:ee:4d:a2:89:d6:85:b3:8c:0e:84:f3:4f:9c:51:
3e:67:b0:cf:59:d4:dc:44:92:d6:bb:b7:f1:ea:0b:60:77:82:
19:0f:34:c3:65:6a:d5:1c:48:45:00:d2:a0:bd:b8:7b:59:04:
f8:1b:c2:ab:43:f8:34:01:6f:5c:21:72:9f:cc:5c:97:1a:5d:
89:1f:6c:89:7e:97:b6:d5:39:79:fb:90:8f:ae:b8:e6:ce:05:
8f:44:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:48 2025 by rpki-client