Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: rTYFxmi05WWAXMte+nk68FbiWeSQeNQEKxRm/YlGVbs=
Subject key identifier: 07:9B:45:83:40:E0:03:59:57:05:E2:37:1E:54:2D:68:8C:C8:3C:D3
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 0197684E223600817F7EB1ECCD9DF381E207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 06F6
Signing time: Fri 13 Jun 2025 08:00:40 +0000
Manifest this update: Fri 13 Jun 2025 08:00:40 +0000
Manifest next update: Sat 14 Jun 2025 08:00:40 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: +VsTe4YyTLh/AxrIkTgSL2jU2vfq0PQtIqR6fBaAdiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:22:36:00:81:7f:7e:b1:ec:cd:9d:f3:81:e2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Jun 13 08:00:40 2025 GMT
Not After : Jun 14 08:00:40 2025 GMT
Subject: CN=079b458340e003595705e2371e542d688cc83cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:98:b8:cd:5b:1d:83:aa:ef:38:ab:ee:67:
29:67:e9:d0:0b:55:18:2f:08:0f:92:9c:62:73:61:
ce:aa:b2:30:ba:22:bf:86:0a:fd:0d:8f:77:3f:5c:
5b:f8:07:69:bb:7b:7b:29:84:a3:07:35:2c:28:21:
0a:b5:70:39:36:f0:6b:22:37:35:7a:bb:85:1c:08:
ae:4f:f6:1f:48:89:52:20:99:d8:61:27:82:aa:c7:
b4:06:4b:59:1c:07:f9:e9:fd:51:da:ab:09:ab:bc:
0f:7c:85:13:0b:c4:23:3e:ed:ed:b4:98:cf:57:00:
8e:3e:97:d6:ae:50:05:7b:73:20:75:6e:db:fd:4b:
17:3d:31:1d:eb:f9:04:b5:68:b2:ee:1b:1c:83:f5:
64:f3:8b:2a:bf:4d:45:18:7b:df:2f:6f:b1:86:ad:
36:42:e9:81:a3:68:5e:ce:af:21:02:29:e4:44:bb:
4e:b7:cf:89:30:6f:c2:e9:f1:9f:c6:e8:cc:69:98:
10:96:9a:e1:8d:70:17:fd:f0:a1:2e:8c:d2:76:e8:
be:7a:3a:0f:d3:66:d0:46:d3:c2:0c:9a:05:6b:f3:
41:22:6d:2f:8c:28:d3:22:e5:40:af:e1:9c:95:4a:
e5:ad:64:38:f5:16:85:a8:d3:4e:53:9c:4b:38:4f:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9B:45:83:40:E0:03:59:57:05:E2:37:1E:54:2D:68:8C:C8:3C:D3
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:90:51:39:e7:9e:ce:96:e4:76:ca:97:1c:52:14:24:40:b1:
f2:9f:fd:91:7e:03:34:ce:3d:bb:6c:64:cd:c3:48:01:a5:2b:
05:47:54:97:b3:94:58:00:af:bf:3f:df:d8:e3:da:8b:0a:f9:
8f:02:fc:30:c5:fa:ae:e9:58:39:da:bf:94:f1:f4:13:c3:46:
e1:18:19:e3:28:8b:e9:78:17:b1:7b:f2:fe:b4:aa:4b:7a:69:
33:c9:0e:a1:0d:38:73:8c:86:dd:3b:80:5e:38:40:2a:75:45:
5d:69:6a:4e:2a:92:6e:91:da:9e:f1:47:cb:3e:5c:b8:ba:f0:
3c:a4:b3:e8:9d:ca:53:67:b8:e5:fc:e1:57:ec:57:3c:81:63:
cb:78:3c:d8:ef:12:2f:ce:24:12:79:35:35:9e:17:b4:d1:65:
fb:0c:ce:82:63:5c:fa:56:60:e4:2a:ea:ad:2c:9d:91:de:a6:
dd:ee:92:c1:0f:41:00:a6:a5:35:e6:15:41:60:c4:a4:a7:c0:
66:3a:3c:20:ae:34:20:d5:3c:f8:43:e4:21:b7:43:54:ab:7d:
d3:54:f8:a0:d1:2d:2d:44:5b:8a:55:d6:51:fa:de:28:29:22:
e0:fe:03:fb:e0:c4:a1:8a:4d:76:0e:b6:c4:0e:a2:c0:81:64:
ea:57:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:34 2025 by rpki-client