Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: hUOLlg2CeOe5R26lU4XR73/v3bx7ngVrnhBzYDrkB2Q=
Subject key identifier: 46:A6:1F:75:F3:FE:B7:F7:09:2D:91:96:CE:15:72:F7:8C:B6:A9:8D
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 01976929D5E8262D87D5B1BFAF4FB436BD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0453
Signing time: Fri 13 Jun 2025 12:00:38 +0000
Manifest this update: Fri 13 Jun 2025 12:00:38 +0000
Manifest next update: Sat 14 Jun 2025 12:00:38 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: Na/5DwQcZlXFznI+MtoMRz90wOGmLK1XM2XlYbljwik=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d5:e8:26:2d:87:d5:b1:bf:af:4f:b4:36:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Jun 13 12:00:38 2025 GMT
Not After : Jun 14 12:00:38 2025 GMT
Subject: CN=46a61f75f3feb7f7092d9196ce1572f78cb6a98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:c5:da:42:c1:46:dd:74:7c:44:58:ce:88:
c6:6d:75:72:0a:df:05:0f:e2:ff:a3:b4:a5:6c:64:
bf:98:a3:55:40:f9:79:6d:35:61:ac:a1:1b:a3:0d:
84:5b:61:de:45:73:a9:f4:2c:c0:81:ab:91:a4:7f:
62:23:00:47:11:96:9a:7b:27:76:c3:69:d0:ab:53:
06:bb:1e:6d:b1:7c:98:77:b6:2f:30:c0:1b:4e:9b:
e4:6e:11:3b:c1:67:87:71:8b:63:78:fd:e5:85:fe:
d4:88:27:ab:fd:dc:e7:f7:85:b5:97:e5:e2:d2:e3:
1c:e8:b1:1e:c3:36:02:27:14:30:67:39:9d:8a:e2:
a9:66:6a:87:b1:22:9c:84:b4:90:fc:eb:97:6e:08:
80:20:2e:aa:5e:eb:bd:5e:63:01:33:a8:3c:01:60:
ba:be:e9:2c:90:60:15:72:87:78:de:2c:30:19:bb:
55:30:8b:7d:86:df:e0:45:d1:06:0d:fe:87:d1:34:
c9:43:d5:6a:3b:15:0f:64:8f:46:2c:ac:5b:f2:51:
98:e1:b7:4c:c1:c4:f0:8f:4e:3b:20:48:8e:ea:7b:
4f:fb:8d:a3:73:20:43:fe:6d:08:0a:83:59:bd:f9:
d6:52:ec:ab:7c:65:4e:58:31:d7:ce:20:f3:89:98:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:1F:75:F3:FE:B7:F7:09:2D:91:96:CE:15:72:F7:8C:B6:A9:8D
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:78:51:c8:ce:7a:ab:7c:eb:35:0f:b1:0f:2c:a2:2e:9d:a3:
94:c4:ef:f9:4f:e1:9e:94:1a:26:80:ee:74:04:7d:0d:c5:99:
53:cd:8f:bb:c3:62:21:2e:14:32:c0:90:f4:7f:3d:14:d9:be:
db:28:ea:bd:1a:d8:b3:65:a0:10:60:1b:88:83:83:91:db:af:
fe:ae:59:e0:88:ae:6d:ed:c5:3d:6f:e5:74:79:68:c0:35:74:
62:81:03:77:01:67:fa:1d:46:e9:03:53:37:d2:83:a7:c0:41:
7e:c8:98:51:2b:d6:c3:ef:87:90:07:47:ef:97:c2:22:c6:27:
2d:a2:95:aa:13:65:01:7e:d6:be:70:23:31:df:3d:bb:b8:39:
e1:08:82:4b:7e:9c:78:e1:69:3a:08:9f:72:d2:75:6d:60:60:
63:cb:23:48:9f:c8:41:db:ce:04:b0:93:51:4a:9f:13:59:12:
f7:61:9e:68:03:ee:bd:11:5c:c0:4e:39:27:ec:d2:4a:aa:33:
94:de:ab:49:13:60:6b:1a:d2:0b:5f:89:1a:99:d5:af:90:dd:
7f:8f:93:94:3e:18:0b:66:25:cb:34:a2:37:f9:37:d6:0b:57:
b5:84:38:e2:e9:08:bc:f1:eb:10:0e:01:ac:d0:e4:f8:d7:b6:
b9:19:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:24 2025 by rpki-client