Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: HWkmL++SzpA0xBpCwtgyQHLtRKwz/Q1cq9WUvqFMqyI=
Subject key identifier: EA:FF:DA:45:15:6C:0A:B5:DB:76:F3:C4:7B:A6:43:78:B6:67:A4:60
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 0198D660563626D653D9F8BEFE2E5D6736E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 055C
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: +oeV0qaBQSwoL6cw55RNZKF4PvpLhhTmYVIvi2qe5so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:56:36:26:d6:53:d9:f8:be:fe:2e:5d:67:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=eaffda45156c0ab5db76f3c47ba64378b667a460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:c0:3d:9f:1b:0f:a8:fa:ce:20:27:be:e9:
1c:98:85:fd:df:58:d2:39:13:a3:46:36:b9:78:df:
c9:22:8e:ca:9d:34:19:e8:03:eb:ec:f5:f1:b4:31:
83:78:7f:b2:79:a3:98:14:2d:dc:d4:9d:09:f3:31:
d8:fc:19:1a:dd:d2:d5:dd:7b:65:22:d9:67:82:d5:
df:34:1a:87:e7:62:48:df:3a:16:d9:af:e0:bb:26:
a4:d3:f7:fb:a1:c0:87:99:7e:33:ad:9b:fe:f8:79:
a5:40:3a:61:44:56:95:9f:2c:50:77:fa:08:c8:fa:
a6:1a:19:fd:0a:52:00:1f:65:1a:05:50:04:93:be:
02:d4:c2:cc:1a:e2:85:44:9d:87:81:96:30:80:36:
03:84:a7:6e:c7:cb:ca:d9:cc:18:ab:34:73:83:19:
3c:8b:c5:98:14:ec:55:c5:c8:7d:05:37:d7:df:13:
92:fd:ea:ce:15:8e:4d:c7:df:ab:31:10:7c:f8:6d:
98:e8:3f:f3:76:65:88:00:fb:9e:92:3f:ed:d3:b3:
fb:b1:c5:e6:c6:18:64:d3:b9:00:46:52:53:f6:e3:
37:de:3e:eb:06:cc:d0:bc:31:1e:95:88:37:1f:d0:
ef:d5:a6:a7:ba:da:71:d1:41:2e:ee:ff:32:df:c5:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:DA:45:15:6C:0A:B5:DB:76:F3:C4:7B:A6:43:78:B6:67:A4:60
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:00:e3:09:43:18:1d:26:82:b0:f1:f1:97:bf:b3:d9:61:
cb:9c:7b:87:a3:13:fa:7d:ac:fa:12:45:7b:59:23:3b:96:a3:
21:ba:29:ae:15:77:6d:e3:bf:78:2f:c9:94:8f:dc:74:2c:5b:
77:6f:5c:19:55:3a:7d:25:7f:a7:78:84:0c:e6:04:c4:09:1f:
d2:bc:d6:5d:c9:59:c3:c0:24:19:3d:5e:dd:49:65:98:36:62:
87:ee:26:99:66:10:e1:64:3e:76:fd:0f:82:ff:02:34:53:a8:
6a:1c:f4:18:28:28:ab:4a:10:4b:dc:b5:71:d1:39:64:07:0b:
a0:01:6d:69:57:78:4c:a7:9b:d6:28:ed:8f:79:1d:83:0c:61:
fe:a4:43:0a:c1:7c:6e:01:3d:e6:c5:10:3b:a3:e9:16:82:9f:
a6:64:8b:a2:0b:75:14:0f:8a:81:ff:79:04:81:d3:1a:63:ca:
45:b7:1d:c3:eb:89:83:5f:b4:a5:61:61:62:bc:06:a7:5d:12:
1a:5b:a5:0d:53:f7:f8:ad:53:00:cd:f5:05:6e:16:24:dc:dc:
3e:f9:e6:67:d7:7d:34:1d:fb:d3:60:30:dd:24:bd:c0:67:8f:
93:88:f0:e0:4f:e6:bd:7a:7d:1c:53:0d:34:e6:42:7c:1d:43:
84:a1:54:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:47 2025 by rpki-client