Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: T2mTkrVZ9T81QlU8XOORbsT2yee/RqoKcbvzRSVyW/4=
Subject key identifier: DF:05:EA:0E:BA:2B:AB:06:7D:B2:14:A3:80:3D:48:E5:4F:44:7F:42
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019769CF1E36B09775E7B09D79F64BDFB719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 15:01:10 +0000
Manifest this update: Fri 13 Jun 2025 15:01:10 +0000
Manifest next update: Sat 14 Jun 2025 15:01:10 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: Rr3/vUvPoUn8JNcI53N/R82zlPQO8XDepW1sOpY9nOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:1e:36:b0:97:75:e7:b0:9d:79:f6:4b:df:b7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Jun 13 15:01:10 2025 GMT
Not After : Jun 14 15:01:10 2025 GMT
Subject: CN=df05ea0eba2bab067db214a3803d48e54f447f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:3c:70:95:69:58:74:8a:06:06:82:47:c7:
d1:b6:21:4c:d3:22:78:29:df:79:75:0e:12:91:b8:
9b:65:04:3a:08:a6:e4:8b:15:d8:b3:ce:a9:b5:50:
40:50:fd:3d:cb:10:9b:db:16:09:74:80:fe:e5:27:
13:11:d7:e1:4e:15:88:87:66:64:e2:ba:8e:28:78:
f2:29:34:ca:47:88:e0:2b:8b:3c:cd:f9:1b:1d:e3:
2e:35:65:de:30:ce:d7:0c:5a:f3:fd:99:d0:4f:dc:
ba:7a:f9:bd:91:bc:66:a9:9f:e9:4a:0d:ab:cf:9c:
ce:bd:d1:9d:2e:af:70:55:46:92:9c:9a:cc:6d:7d:
fd:08:25:e6:1f:cb:59:1e:13:e7:c0:32:74:54:b9:
16:a9:75:1c:e8:1c:c9:c0:fb:63:48:ab:77:b1:49:
cb:4f:ad:6d:b9:de:1f:27:da:5a:c2:92:a0:40:a8:
34:87:89:48:d8:fb:cb:dd:22:e9:35:3c:39:bf:93:
33:db:bb:61:d3:2a:f3:4b:99:2d:bd:eb:ef:d9:fe:
1c:1e:f4:1b:7c:6f:4f:34:0e:64:e2:dc:5a:d6:72:
88:2b:0c:6a:71:13:2c:90:32:d5:34:4b:b0:e5:79:
6e:3d:12:bd:71:a4:07:72:07:a8:af:67:3a:e2:13:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:EA:0E:BA:2B:AB:06:7D:B2:14:A3:80:3D:48:E5:4F:44:7F:42
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ba:d3:83:1b:79:35:79:a8:6d:26:ea:23:99:fd:44:8a:e1:
96:e0:1c:bf:50:cc:a1:ce:a3:b4:70:67:8e:19:f5:6f:d9:ab:
50:ea:cf:8b:21:1c:63:83:89:f5:d3:65:f5:47:50:9b:15:e5:
af:ea:7a:e0:26:ab:af:ca:0d:0b:25:d1:42:f5:63:a6:ba:fa:
28:f5:2e:af:91:e3:fc:58:61:ef:cf:36:82:5c:67:f1:6a:39:
03:77:d4:86:cc:c7:92:0e:c0:30:71:f2:a5:4d:25:52:62:e9:
6b:ef:6d:88:4d:88:01:a1:9b:5f:af:07:13:9c:18:fd:87:0c:
61:75:44:75:32:43:1f:5e:99:15:87:29:35:a7:65:60:6b:cb:
d1:61:2d:37:a4:9c:db:96:ba:ca:7b:6f:6c:d3:60:00:ed:20:
72:82:cd:39:17:ea:04:3b:1b:c3:7f:e3:fd:0a:c3:67:69:5f:
20:0a:41:54:4b:8f:f5:af:6a:c3:e7:8a:ec:d8:d4:34:e3:0a:
2f:d0:2c:12:ff:61:31:2d:61:ce:ad:69:ac:7c:a1:dd:a5:63:
79:03:7e:96:2a:6b:37:8f:94:a4:40:6c:56:80:51:d3:47:0f:
f9:c1:16:11:0e:6d:46:94:ef:86:a2:73:3e:4c:25:9b:f4:96:
3e:2f:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:01 2025 by rpki-client