Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: 84lxTfxZzN6i2sabjPkMtyT1AK5pB57lRXDdLyNNn1s=
Subject key identifier: 24:B9:E9:B5:EE:A7:2A:A5:7C:D4:5C:D9:D2:6F:73:B8:1C:68:F7:C6
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 0197703EFB3B786A24A304A02C41B7012D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 21:01:05 +0000
Manifest this update: Sat 14 Jun 2025 21:01:05 +0000
Manifest next update: Sun 15 Jun 2025 21:01:05 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: AS83G4IAcjffcmAGJtlDs252DSXJPaXgVtKCU2zQgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:fb:3b:78:6a:24:a3:04:a0:2c:41:b7:01:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Jun 14 21:01:05 2025 GMT
Not After : Jun 15 21:01:05 2025 GMT
Subject: CN=24b9e9b5eea72aa57cd45cd9d26f73b81c68f7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:da:6b:92:95:48:38:ed:47:fc:82:82:33:
e1:4d:77:9a:08:19:5d:90:42:ff:e3:6a:dc:20:3b:
b3:86:8c:a5:a6:15:1a:65:bc:e8:6b:f7:31:c5:d3:
57:83:ca:81:72:07:2b:3c:06:77:96:9d:db:10:61:
43:b0:b3:8b:51:fc:e0:c8:3c:61:12:e5:ab:b1:e1:
2a:80:d7:46:57:1d:9e:29:e8:1f:8c:0e:12:66:53:
93:b1:3e:ee:d5:a6:81:70:03:1d:29:ef:d5:15:e2:
1f:8c:4c:ab:92:32:ab:de:f3:e7:c5:58:b5:c6:13:
0e:2b:43:ab:a0:eb:f9:e7:71:9e:14:53:db:e9:59:
15:b1:f5:14:27:a1:ce:b6:a5:f1:41:db:43:69:70:
60:7a:68:ad:60:c9:da:68:37:ef:f0:4f:a8:0d:f5:
c3:e0:c2:9a:4c:f7:04:d6:9c:4d:e2:f5:40:7e:b0:
92:ce:2f:ed:17:14:32:16:a9:45:af:a2:04:72:05:
6d:d8:fe:92:dd:31:8a:36:7b:d5:f1:db:0f:5b:ff:
ef:28:c4:13:b3:98:75:e9:40:a1:92:88:a9:64:64:
4a:d1:c1:02:57:75:6c:8b:ad:aa:a6:76:5f:a0:86:
e8:ab:86:3b:8f:cf:6e:31:81:23:30:eb:af:ca:d1:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:E9:B5:EE:A7:2A:A5:7C:D4:5C:D9:D2:6F:73:B8:1C:68:F7:C6
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:8e:69:2d:17:b5:f7:61:0d:a4:88:e0:95:27:e7:51:cf:
76:d3:2c:9d:63:3d:55:25:ba:04:97:c4:fb:a6:6a:a2:2d:2c:
c3:b2:a5:a1:2e:93:19:8c:c5:e9:b1:b3:08:eb:e5:27:48:43:
97:c5:a0:d8:95:f2:17:40:9e:0e:36:ef:8e:ff:63:75:54:19:
61:46:1d:a0:6c:05:e8:69:22:6d:0b:df:b3:7c:06:db:e2:6c:
9c:b7:17:36:22:ae:7e:d1:62:be:08:a6:3f:76:0f:7b:3a:b6:
fb:5a:7a:6e:f5:0e:60:e7:57:b2:ff:f8:0b:66:51:33:bb:78:
98:3d:10:66:fb:d0:c6:4d:e5:fe:62:4e:e5:19:cb:5f:8d:b2:
5b:c9:c6:c5:24:db:e7:08:af:bd:0f:47:71:a4:f3:07:25:1b:
2c:a3:5a:84:b1:92:ee:88:c1:71:9d:72:42:aa:b8:96:10:bd:
a7:85:2c:21:d9:ce:a3:71:3e:4c:59:3c:fd:03:58:c2:db:89:
37:fc:ee:60:ce:38:b6:b4:66:68:59:14:93:98:08:33:23:aa:
fc:94:04:6b:a6:4e:38:48:55:5b:6c:f9:28:d1:fd:f9:ff:90:
c6:28:f0:19:bb:1e:4f:78:6b:9e:a9:ca:57:84:bb:2c:f7:3b:
b7:b4:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:13 2025 by rpki-client