Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: jn8L9p7gAa+Z6+odYEJtvdeTBfUcFecYWikvijsM7rE=
Subject key identifier: 3D:9E:F8:4D:CE:FE:30:85:4B:A4:79:75:CD:0B:F8:4E:91:C5:31:61
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019768BC27925B5FA8813C2D6C50A0B58BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 0EBE
Signing time: Fri 13 Jun 2025 10:00:50 +0000
Manifest this update: Fri 13 Jun 2025 10:00:50 +0000
Manifest next update: Sat 14 Jun 2025 10:00:50 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: rybKy7+mSB/zAWpd46u3MBEsOvYSJlBhJ9eTMv3s1Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:27:92:5b:5f:a8:81:3c:2d:6c:50:a0:b5:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Jun 13 10:00:50 2025 GMT
Not After : Jun 14 10:00:50 2025 GMT
Subject: CN=3d9ef84dcefe30854ba47975cd0bf84e91c53161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:1f:25:81:41:f0:8c:49:65:88:fc:54:ea:
1d:c7:db:b3:7b:27:b1:37:6c:ed:8f:ef:da:2a:0e:
18:ff:8a:66:88:5c:e1:66:9e:d9:a7:fb:18:f7:80:
89:dd:b6:94:d1:dc:ef:48:a3:80:59:aa:fc:95:9a:
8c:4e:4f:8e:01:67:e7:87:c3:d5:65:d0:7c:ff:67:
4d:d8:da:4f:52:7e:90:de:7b:a2:8e:8a:b5:14:72:
d7:d8:12:ec:7c:65:d8:e4:ff:ca:8f:e0:ac:65:4d:
5e:78:44:d8:d8:87:92:c1:cf:23:94:bd:5d:c6:8e:
17:dc:fa:46:c1:14:87:59:1c:82:0f:bd:bd:27:e9:
88:21:19:3c:62:2f:40:b9:91:0f:ae:cb:9e:c0:af:
62:14:07:85:ef:e2:7e:d2:9d:13:48:06:48:d6:b6:
dc:b1:ed:25:ec:b0:4d:10:dc:54:5d:6a:7e:ba:ba:
72:0f:0d:b4:e6:fa:14:fa:5a:b1:71:5b:4f:f4:6e:
9b:b3:64:74:ae:e0:a5:d2:d2:61:b7:27:68:3a:e4:
84:fb:f9:de:90:7e:d2:e3:de:71:e1:01:c7:b1:4a:
a3:9c:e2:6a:2d:33:2c:b0:ae:75:66:43:27:0d:17:
29:45:f4:c4:f1:5c:a3:f1:a8:d5:c0:20:24:17:04:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:F8:4D:CE:FE:30:85:4B:A4:79:75:CD:0B:F8:4E:91:C5:31:61
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:99:7b:71:29:c9:82:7f:00:b9:43:db:b7:d6:ac:d9:46:3c:
17:b1:e6:0a:df:0b:62:32:9c:82:fc:61:d9:c3:22:82:07:aa:
48:1b:a8:a0:ba:94:d6:dc:fb:2a:35:79:a7:93:07:1d:0e:2e:
bd:98:73:09:12:aa:86:66:1c:27:30:c9:5d:42:b0:13:ab:ee:
b1:c1:7a:f8:83:f2:5d:91:1d:40:04:64:dc:96:e9:86:c5:97:
41:8a:ee:8c:40:6f:bb:96:28:06:9f:9a:40:a5:68:5b:1b:12:
19:8a:c7:b9:7d:56:72:7e:48:8d:62:48:91:0a:26:92:8a:73:
44:c9:8b:58:f0:fb:3c:45:46:0c:21:0b:e6:06:b1:85:05:b6:
ab:ad:dc:eb:72:6a:e9:30:d7:b7:f4:a7:23:ea:cb:1c:dc:ac:
63:41:c9:77:fd:dd:4d:c5:a0:01:49:bc:16:eb:53:26:dd:e7:
bf:8c:4f:8f:15:44:29:b6:f6:e8:b9:29:1a:f5:c5:eb:e3:96:
c4:f6:22:a8:96:39:79:55:b9:18:3b:24:6b:db:80:60:69:b3:
ac:7f:58:ed:cd:9d:a9:67:2a:ae:52:02:f0:a1:a5:7f:0c:17:
26:22:0e:9f:51:27:48:59:4b:20:c6:d4:30:59:07:01:49:75:
91:f9:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:35:28 2025 by rpki-client