Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: 6yAtxtzfsBj7Ykf/94HdBOz1zPHAFg79pbrAv5VI84A=
Subject key identifier: 00:CB:E5:91:F0:B1:87:11:B6:86:0D:DA:C8:4B:93:7D:68:D0:7F:E8
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 0197C49301AB9962CE98DEA12812FD016277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 106E
Signing time: Tue 01 Jul 2025 06:00:57 +0000
Manifest this update: Tue 01 Jul 2025 06:00:57 +0000
Manifest next update: Wed 02 Jul 2025 06:00:57 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 90ABZKhasBPnAfI/0oUP6TyH/2kig699T6PiMLwXl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:01:ab:99:62:ce:98:de:a1:28:12:fd:01:62:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Jul 1 06:00:57 2025 GMT
Not After : Jul 2 06:00:57 2025 GMT
Subject: CN=00cbe591f0b18711b6860ddac84b937d68d07fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:12:9e:e6:47:90:42:ca:31:62:65:2a:62:
57:6c:18:2e:a3:34:ac:e1:71:51:a3:9d:ab:77:18:
63:26:7f:db:16:06:2a:4a:18:9f:b6:9b:ea:be:12:
7d:37:2b:19:39:50:a2:ba:9c:b8:ca:88:4f:45:f6:
9f:4e:87:7d:9f:1f:83:5c:01:56:f8:4e:38:b9:97:
29:a0:f2:bb:de:17:48:75:4d:51:63:64:89:5b:24:
1d:92:2f:ee:8f:e1:c7:1d:b1:60:ac:5e:70:03:19:
b7:e0:9d:12:41:01:0c:7e:43:53:92:a7:c4:6b:5d:
62:07:98:b8:2a:38:8f:af:a4:18:c9:67:f8:4e:bf:
59:68:ad:16:ca:d6:f4:61:f2:10:db:d7:5c:32:89:
32:ca:82:fd:65:64:3b:a3:a6:ca:3c:a3:1e:f9:b4:
6a:63:43:78:7f:0b:11:1e:c3:8c:70:5d:7b:53:d2:
84:42:4b:4d:9f:0b:12:df:77:f5:99:a5:e5:08:ce:
02:c9:2d:6f:7f:ac:c1:85:3d:19:f0:71:a5:dc:90:
56:e4:cc:11:a4:e4:7d:7c:f5:7d:b8:14:a9:89:d7:
1e:52:1d:12:02:ad:ee:2a:cb:53:b4:d9:2b:f2:5a:
e6:f9:7f:3c:99:5b:f8:a9:45:9e:ba:d7:c0:a5:bb:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:E5:91:F0:B1:87:11:B6:86:0D:DA:C8:4B:93:7D:68:D0:7F:E8
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:91:00:22:64:21:2e:71:72:55:64:af:12:20:61:53:77:d5:
83:d0:58:93:34:bb:e2:3c:b7:e3:0b:2e:42:cb:25:41:f7:35:
1b:ad:16:d9:ea:a4:b4:24:92:39:5c:61:1a:d8:b9:99:7b:33:
c7:25:97:a0:c2:22:41:4f:d2:ae:a7:b3:ac:c1:7b:37:47:3f:
73:36:5a:d5:03:05:7e:fd:23:84:c0:4f:a4:96:cb:aa:09:1c:
d3:af:d1:90:63:50:bb:25:3a:1c:a1:0e:ab:e9:24:53:54:be:
0d:7d:64:9d:42:1b:51:cd:99:30:ac:d1:78:1f:be:72:5e:85:
82:71:7d:bc:05:1a:70:f5:a5:07:17:3b:0a:ce:41:3e:71:3e:
4f:3c:05:c3:35:c7:fe:1d:a8:57:ff:bc:99:3f:09:67:1f:4d:
0e:63:ea:9c:4c:37:ad:97:66:60:cd:33:d4:d7:20:c5:74:2c:
0f:88:d6:72:1f:f0:d2:c8:0f:f0:73:7f:86:62:d1:0a:a7:bd:
74:85:66:f6:fe:eb:ee:48:52:b9:8a:da:51:47:90:e7:51:e6:
08:1a:db:b2:7e:42:e3:a0:f4:ca:44:f5:c7:8c:f8:2e:83:26:
28:ef:0f:40:43:12:1f:b3:f8:af:6e:52:ef:71:34:08:5b:5b:
72:53:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:14:45 2025 by rpki-client