Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: VWtx06cZV5YE4nHNJewJbNMI3V1YoxReCdMwF0yk0Gw=
Subject key identifier: 99:4E:B5:DA:47:D8:05:65:09:5D:DA:3F:3C:F0:8C:85:F5:30:D8:B0
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 0198D515FC3FBED7BEA64D4840394B883867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0DF4
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: XcOEr9WaqH2zLghdct7T1BEqAijcFYHb9nscsGvvphE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fc:3f:be:d7:be:a6:4d:48:40:39:4b:88:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=994eb5da47d80565095dda3f3cf08c85f530d8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:a9:2d:66:dc:84:df:25:64:28:5f:df:7c:
69:9b:af:b1:36:91:38:54:c5:30:79:cb:65:c4:68:
78:db:b4:d6:fe:e5:e2:38:d1:69:6c:a3:0d:a3:0a:
60:9b:d6:58:61:18:93:38:66:e1:a2:37:c6:08:19:
10:e4:b2:22:f3:d9:88:d0:62:56:7d:86:0f:90:12:
e5:4f:56:88:97:5a:67:77:50:be:a4:89:23:4f:5d:
d1:d0:28:9a:1a:32:4b:9a:4c:c1:70:f2:9a:a2:6b:
90:eb:88:c0:9b:b2:53:98:20:72:a0:a5:12:66:eb:
d5:f3:23:f4:64:70:05:da:94:28:aa:7d:cc:4b:fa:
8b:d8:4f:0e:cd:43:f4:c8:63:c2:aa:a3:10:06:5e:
89:f3:aa:6e:fb:5b:ba:66:5c:ce:06:e7:dc:5d:d9:
0b:a4:f9:7f:4a:14:a2:54:03:ea:d2:9c:1c:cc:24:
4c:b5:00:61:b9:e5:87:56:2d:49:5a:49:f0:34:c1:
32:3e:dd:1e:f1:68:1b:6f:23:3b:a2:73:eb:db:a9:
f9:84:ff:52:7e:dd:f9:4b:18:e2:15:53:a1:66:44:
9a:6f:03:94:ff:35:2e:f3:fb:0d:bf:2b:ec:83:ed:
9a:e0:89:89:79:67:94:29:7d:78:f4:cd:bb:23:24:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:B5:DA:47:D8:05:65:09:5D:DA:3F:3C:F0:8C:85:F5:30:D8:B0
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d8:ef:0a:51:58:78:32:55:c0:20:a6:7c:96:63:3d:ea:52:
23:47:95:f8:3d:7f:0b:cd:1d:38:a5:75:bd:a6:cc:f5:85:de:
21:41:98:ca:61:23:63:a0:35:62:6f:f9:f6:a9:25:50:5a:58:
dc:f6:90:32:05:46:83:ed:da:45:55:99:88:e3:b8:9f:1a:be:
7b:51:5f:0b:57:0e:09:71:24:d6:d3:ed:19:46:9c:75:b7:c1:
cd:ea:94:10:f4:5f:dc:ec:17:36:bc:50:ff:93:82:5f:79:cb:
e0:ad:e6:c3:ff:c5:47:0a:c4:05:10:10:3a:55:2b:a1:ae:87:
15:e7:21:84:32:a2:83:86:30:fc:1a:0f:78:69:03:89:00:1c:
43:c9:40:39:eb:be:55:ee:15:a8:41:35:8a:f4:32:4a:92:c5:
a2:33:a9:0a:4f:44:95:7a:54:f9:6f:6f:3b:23:b7:c2:b5:22:
5b:dc:10:0b:2e:57:85:85:13:fc:21:fc:54:b8:bc:aa:30:81:
9e:f7:b5:44:9b:ff:bc:09:fa:80:d9:65:a4:94:0c:f8:36:97:
0a:6b:42:e8:6c:2e:cd:51:49:90:c4:d3:98:f4:9a:3b:3e:dc:
9f:be:59:04:4d:4e:b8:c2:c3:bc:19:9a:58:5e:90:9f:f4:28:
6e:cd:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:52 2025 by rpki-client