Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
File: jMcNehq2zHYirM80kb5xURXYQzo.mft (raw, json)
Hash identifier: 2+PqMJyNQUY9jQgn8HbUdTJXjE/QDBDY8FrKGPYLWe0=
Subject key identifier: 81:28:B3:AE:FF:62:B6:58:A0:5D:71:9A:F4:5B:9C:56:04:13:BB:69
Authority key identifier: 8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
Certificate issuer: /CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Certificate serial: 019778D38C26DDD5AD48F509784955B38C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
Manifest number: 0B5D
Signing time: Mon 16 Jun 2025 13:00:19 +0000
Manifest this update: Mon 16 Jun 2025 13:00:19 +0000
Manifest next update: Tue 17 Jun 2025 13:00:19 +0000
Files and hashes: 1: jMcNehq2zHYirM80kb5xURXYQzo.crl (hash: JDqq5awbcd/hldAhPFXqibOW8VsVlEB3v4T+V9mRX0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:8c:26:dd:d5:ad:48:f5:09:78:49:55:b3:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Validity
Not Before: Jun 16 13:00:19 2025 GMT
Not After : Jun 17 13:00:19 2025 GMT
Subject: CN=8128b3aeff62b658a05d719af45b9c560413bb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:45:0a:44:97:70:7c:a0:3e:da:96:02:04:
a9:8e:4c:b1:f6:50:c3:90:fd:cf:ef:83:89:95:88:
d8:da:7e:6c:e9:6f:80:15:a9:af:ab:8c:ab:4d:97:
5b:a4:22:de:f3:5f:79:b0:1c:69:35:64:b4:63:57:
8c:1d:6f:45:c3:48:14:ea:23:09:d4:1e:41:05:33:
ed:dc:f2:b3:02:e7:77:97:3e:9b:37:43:5e:ee:99:
37:52:85:21:0e:7c:3a:2f:3d:d9:ae:3d:c6:bd:6a:
7e:0d:b7:ba:56:d3:21:65:31:eb:a5:d9:64:2d:a8:
cf:83:d4:cf:d3:26:fe:3e:d2:2c:bb:59:55:56:db:
1e:21:95:23:12:da:5e:54:2b:15:d8:46:71:a9:f6:
1f:74:ed:81:46:76:1d:17:6b:e7:af:ba:bb:84:73:
9d:c5:8e:49:a2:ce:74:f0:df:64:23:33:fb:ee:95:
4c:5c:7b:6a:92:f6:f1:45:94:c7:1f:81:05:05:4d:
a8:3d:c5:b7:00:50:86:bd:ea:bf:c7:1d:4a:5c:6d:
86:69:fe:b7:98:75:63:54:ae:50:88:50:96:cb:e4:
3e:dd:50:7b:4b:89:51:74:d9:eb:f9:df:51:6a:03:
89:46:79:45:24:80:68:39:5b:69:cb:6c:e2:b2:8b:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:B3:AE:FF:62:B6:58:A0:5D:71:9A:F4:5B:9C:56:04:13:BB:69
X509v3 Authority Key Identifier:
keyid:8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1a:70:69:43:31:4d:fb:4f:e8:54:5e:c4:6c:df:e1:9f:30:
9f:2b:e6:7c:5e:48:86:1c:c4:41:99:bf:8a:83:a4:93:46:c8:
e2:c8:14:bd:7f:bb:9e:df:7c:2e:9d:67:be:42:ad:f1:16:c7:
09:0c:95:1f:da:87:dd:f9:ad:8c:f0:dd:45:6a:f4:8d:2f:2c:
52:8f:a9:b5:8c:59:57:e8:41:de:3b:20:6a:b8:93:59:cc:fa:
6b:09:f0:8d:71:9a:6f:28:f3:8a:55:98:68:ac:e8:f3:de:16:
a3:30:72:02:80:bf:8f:6b:2b:58:8c:fa:29:68:4d:02:03:1e:
75:19:89:44:3a:9e:87:96:a8:dc:5d:8a:34:3a:62:68:08:9c:
7c:54:5e:92:0e:72:f8:88:72:0d:6c:7c:1f:50:e8:f8:1d:79:
1b:fe:07:4f:a4:96:cf:e7:45:c7:63:24:8f:34:94:fb:ec:f0:
fc:5d:16:e0:36:c7:a3:a3:03:2a:a4:fc:94:99:69:f6:c3:6c:
94:ec:01:a4:bf:e4:20:c8:97:92:2e:75:63:8a:58:ed:e9:d0:
ad:49:32:28:b4:d3:ec:63:c7:4b:e8:19:7d:10:9a:d9:6f:82:
7c:9d:e5:30:3e:ea:88:54:91:df:1b:14:91:c6:44:f8:98:33:
62:45:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:49 2025 by rpki-client