Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: WbMQ+fmTsrkhA/w4KO+p+tf8TKOkP1UY17mXVHwIgV4=
Subject key identifier: 05:CC:0C:DF:FA:0B:C4:1E:EF:74:54:4E:71:5F:64:2C:1D:A3:C7:3A
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 01976C2AAC87C333848AE1BAECE5C1B45217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 069D
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: C4Mh3dYS18nNWholmNnZlK5odtaZGMCXgtPIBZjEEPI=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ac:87:c3:33:84:8a:e1:ba:ec:e5:c1:b4:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=05cc0cdffa0bc41eef74544e715f642c1da3c73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:4d:12:a6:31:45:53:fd:41:8d:19:7d:24:
c8:5c:65:f0:31:bf:bc:5b:75:57:04:d4:4b:29:23:
8b:2f:b6:a0:ac:d0:50:1b:72:3a:1e:8e:42:5a:79:
6e:ab:10:40:4a:b3:a9:f7:b7:bf:7d:e9:4f:1f:77:
b3:e9:e7:f7:e5:75:63:8f:dd:13:92:33:fd:3c:25:
7a:69:1c:7f:f7:6b:6e:a7:7e:32:90:90:ae:22:24:
fd:0e:2c:7a:78:bc:bc:80:9e:21:df:54:67:c3:e4:
c6:3d:97:30:58:35:b7:5e:7e:5a:45:28:87:78:2e:
f8:e2:2f:7e:c8:86:e2:f9:58:4b:47:3f:91:d7:f0:
57:08:e1:73:11:91:c5:c5:78:7a:44:5f:1f:49:b3:
17:89:5b:38:ce:92:8c:6c:af:b0:e3:69:b6:29:f3:
19:bc:90:2f:0f:a4:2a:ae:87:7a:77:fa:65:ad:22:
68:02:15:aa:82:20:b0:53:b7:65:96:b1:11:a1:54:
a1:ef:89:ee:95:9a:1d:b0:0c:b0:8e:ef:65:a2:25:
13:01:a1:42:b8:50:69:06:25:74:65:0f:f6:22:8a:
7d:81:d9:fa:b2:84:0f:c7:36:2a:7e:7b:14:68:c7:
fb:25:d9:8e:17:16:29:03:d7:1c:41:fe:3a:25:e3:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:0C:DF:FA:0B:C4:1E:EF:74:54:4E:71:5F:64:2C:1D:A3:C7:3A
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:18:b5:30:33:03:cc:03:db:9c:67:2a:b3:3e:cb:71:50:
ca:44:5c:e9:67:04:63:5d:73:06:0d:aa:f8:79:38:12:82:4a:
e5:01:bf:15:ea:cf:a7:53:92:6a:fe:7b:8f:21:00:3b:5f:13:
fd:60:e7:a8:6e:25:2e:e5:f6:3d:42:91:cf:d1:ae:43:39:32:
2d:bc:5b:71:38:8f:fc:cd:6f:60:f7:b4:99:67:3c:6a:95:82:
d3:80:30:4a:6d:51:32:f2:8a:5f:58:12:b0:73:61:1c:6d:ff:
23:9e:a2:ac:3f:6b:52:98:26:e3:2b:28:37:39:45:a2:fb:b5:
0e:98:82:bb:5c:cd:13:e0:c9:33:08:1e:9b:9b:c8:5a:68:6e:
40:27:84:91:2b:17:35:bc:c7:8e:e1:50:ad:85:bf:65:3a:cb:
0e:b2:41:c0:32:e4:09:c4:31:22:25:7d:f6:8b:31:7c:fe:62:
0f:33:70:46:0f:a0:cb:b8:9a:f8:78:40:69:89:b6:1d:12:44:
2a:c2:90:78:0e:47:d8:c1:5b:76:bd:d1:38:73:0f:1f:20:21:
04:c3:3a:cd:0c:cc:72:9d:9b:f3:42:73:43:7f:00:00:6b:5e:
59:fc:36:06:1f:ce:d9:bc:9b:5a:06:03:81:db:35:0b:16:77:
40:98:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:38 2025 by rpki-client