Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: bsiIH0/DTx07gVOgDiQBKXB4VzNGr3yRW2EFGnZnrIA=
Subject key identifier: 4C:65:C6:6B:1F:CE:C8:A8:E2:32:E8:E0:89:17:01:0A:2F:0F:8A:15
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 0198D4E00BD69ECC661A1EB4E4FC1CF04EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 10FB
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: TQf3xLWH87CW6Aj+LjcDz/jHMVxa9FePLFzDOYZ45xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0b:d6:9e:cc:66:1a:1e:b4:e4:fc:1c:f0:4e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=4c65c66b1fcec8a8e232e8e08917010a2f0f8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8f:d4:c1:7e:50:f5:4a:48:ec:a2:46:db:90:
86:f9:f6:bc:1d:1e:a7:ea:ab:16:b5:1d:69:0c:2b:
89:8c:23:bf:98:3a:7d:cd:0b:d9:ac:82:bc:84:51:
03:26:a9:cb:3b:f1:80:9a:0f:a8:89:7d:bf:29:b2:
c8:7b:c8:1c:a5:1e:6d:05:df:c8:ab:45:5e:0e:cb:
04:bd:e0:29:7d:9d:28:b7:e2:56:2b:63:c8:7f:62:
67:d1:2c:4e:58:a6:98:82:75:ca:8c:3c:a9:6f:da:
1f:ca:98:38:a0:81:64:af:05:c4:0c:fd:ff:da:e5:
e8:b6:b3:cb:b3:e4:63:ac:23:f8:d5:9b:81:1b:86:
99:dd:6c:57:91:ff:9f:09:cc:4e:a9:c2:01:86:47:
93:94:99:b3:d5:fa:2f:ac:da:2a:47:41:6e:9d:d1:
01:16:20:79:ba:24:cf:c4:97:13:80:06:0a:cc:46:
86:90:fc:1a:4b:fd:51:31:dc:cf:a4:4c:b2:5c:c3:
1b:d6:eb:16:f1:b9:bf:7f:9c:9e:22:27:fe:93:d5:
7a:1d:39:8d:91:7e:18:27:27:d3:82:20:47:2c:be:
e9:e7:a8:2c:73:b9:45:fc:b8:b3:37:02:b2:c8:61:
60:7a:cb:fb:a6:94:2e:cd:06:ec:9e:53:3d:36:41:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:65:C6:6B:1F:CE:C8:A8:E2:32:E8:E0:89:17:01:0A:2F:0F:8A:15
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0a:2e:6c:72:d3:8e:ff:eb:fd:02:af:79:6d:c3:e0:ee:4e:
36:62:97:1b:75:aa:90:55:fa:77:d6:08:be:f8:03:9a:dd:21:
41:95:17:82:58:fb:12:6c:55:e0:0b:f9:ed:f4:15:b1:35:26:
b6:1b:c5:99:9e:4d:96:79:4b:1c:d2:51:5a:b8:0c:24:79:13:
95:e4:5e:cb:6e:99:60:91:ba:80:b7:0f:e7:a1:eb:20:5c:41:
90:98:b1:b8:b7:5c:f1:8a:e4:74:16:05:38:f1:a7:b6:04:53:
8e:de:99:c2:a5:1f:ce:d8:ba:fb:9e:44:04:53:69:cc:dd:7f:
67:c3:d7:fc:34:15:43:c1:57:d2:b1:a7:cf:24:c8:b9:e7:e5:
4e:b3:65:84:de:21:3e:ab:8b:13:fd:1a:04:19:3b:d9:00:26:
df:a1:99:ee:7d:08:ed:7b:a8:af:6d:7f:86:ac:47:4c:35:a3:
34:31:df:ee:7e:6f:8a:95:3f:fc:c1:f6:cd:92:9b:09:83:ce:
a3:2e:5d:f8:f3:76:c8:88:85:66:f6:c7:77:19:3d:4d:b1:16:
49:a7:a8:04:4b:80:ec:08:9b:1d:66:41:c7:4e:26:3c:cf:d2:
55:27:38:5e:5e:9d:1d:08:ad:c2:b0:4f:54:d2:49:a4:b7:1a:
ed:bb:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:29 2025 by rpki-client