Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: YBZSRiRDHvPSUuYZCBZUpV0k/JXr9Ar9VxJgoCF+sXI=
Subject key identifier: 03:5A:9F:E1:1A:07:7D:40:90:14:EB:4F:1C:D1:BF:04:9D:D1:7D:D1
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 019769609341E4B27501D614F8B980F3867F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 08EB
Signing time: Fri 13 Jun 2025 13:00:26 +0000
Manifest this update: Fri 13 Jun 2025 13:00:26 +0000
Manifest next update: Sat 14 Jun 2025 13:00:26 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: k8I0ZJMiA7YkmuyMH+LC4i/pbZ2mvM4hHxLNFHIhd2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:93:41:e4:b2:75:01:d6:14:f8:b9:80:f3:86:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Jun 13 13:00:26 2025 GMT
Not After : Jun 14 13:00:26 2025 GMT
Subject: CN=035a9fe11a077d409014eb4f1cd1bf049dd17dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:47:40:72:32:91:bd:95:f8:96:6e:1a:cc:
07:f4:4a:b4:15:26:cf:28:b8:1f:de:01:5c:b2:57:
59:dd:93:ee:17:83:88:95:42:d9:ab:a3:8c:90:94:
c0:19:76:98:96:33:1e:67:1e:38:4f:a4:3c:b0:32:
d4:b4:77:38:45:f2:39:86:5d:b1:65:5c:17:be:14:
2b:94:98:e0:89:a6:a2:1f:4d:e3:e8:5b:5d:8b:6a:
3d:21:d7:15:d0:0a:80:29:18:f4:e6:0f:2e:7b:d8:
51:94:ee:c4:17:9e:5a:44:12:45:43:73:84:57:d2:
15:b6:07:a8:53:1e:25:72:62:23:88:ac:4e:9b:6c:
94:de:f1:20:89:c6:39:68:22:b5:fd:6d:90:18:06:
c4:bc:39:4c:e8:8b:75:32:4c:2e:98:a5:ec:d3:35:
ce:74:e9:d9:f0:bb:6f:7d:7c:84:c6:c3:f3:15:5c:
35:c2:ca:2b:ec:1c:9a:4b:7d:d0:ba:90:12:39:70:
3e:a1:eb:32:8c:e2:63:da:0f:e2:2e:ff:a8:58:56:
f6:09:9c:13:00:87:a7:7e:64:29:87:21:35:70:73:
2a:8a:46:53:3b:ae:29:7c:e5:fe:a8:bc:38:17:68:
b0:a3:68:0d:24:0d:b5:d2:80:05:0e:8f:bf:fd:f8:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:9F:E1:1A:07:7D:40:90:14:EB:4F:1C:D1:BF:04:9D:D1:7D:D1
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:8d:c8:86:e1:81:32:9f:62:9d:1e:b7:dd:e2:fa:d5:9c:
59:c0:43:83:87:0a:d8:28:23:e7:51:34:bf:61:01:c0:1d:c3:
fc:94:39:92:be:a6:d2:df:49:12:b4:49:24:f1:88:5c:20:41:
46:9b:49:a7:45:8c:3d:99:88:37:0d:9c:d9:eb:0f:dc:a6:a0:
8b:b8:54:e8:8d:5d:6b:db:d4:4e:4d:f6:21:68:4a:37:53:ce:
a3:d7:c6:28:0f:56:fa:59:47:da:89:78:67:cb:c5:e6:2c:e8:
3f:53:09:44:76:24:c5:a6:65:4c:0a:b8:54:f6:85:aa:cc:12:
17:33:6b:0a:38:1e:92:bd:aa:2f:4d:0c:b9:c7:71:ee:cc:7c:
5c:98:90:e0:07:72:fe:dd:b3:5c:4c:c5:22:de:94:4d:98:8b:
23:7b:af:75:c9:48:6a:59:6f:08:dd:51:7c:0c:66:40:52:37:
42:22:48:28:93:54:2e:11:c5:47:18:4d:61:b6:c9:82:b8:4c:
19:31:4d:40:2a:ba:07:52:e3:16:82:a8:b6:8e:3d:d3:22:4b:
2d:31:2a:90:77:63:9b:c1:85:bf:89:12:05:68:cf:f4:87:1d:
0d:bd:6d:ce:7b:f4:25:24:98:75:98:61:2b:37:2e:73:2d:08:
ef:78:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:57 2025 by rpki-client