Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: /1r2QOd7azeZ2ACMjGcuUCEW68gVKGzTrxAbNOlKp9U=
Subject key identifier: 24:66:7F:52:07:16:B1:06:6B:EC:9C:CD:58:5C:A2:26:3D:1E:C8:18
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 0198D65F9E887892EB0C13FCD051B38D3030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1389
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: oL+J+//Grvi1ZIeo8HpdOIWW/i41wZqIPQ+NECgp+NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9e:88:78:92:eb:0c:13:fc:d0:51:b3:8d:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=24667f520716b1066bec9ccd585ca2263d1ec818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:81:93:e0:0f:2e:95:78:8e:0c:6c:7b:21:
98:2c:ce:c9:67:ef:6f:fd:22:c8:a7:a7:b4:35:20:
65:0d:ad:f0:37:39:e5:9e:21:65:5d:c1:aa:cf:6d:
f2:d6:c5:bb:31:02:8c:1c:b1:0d:7b:c1:15:61:99:
fe:0b:ac:97:7d:81:27:80:c6:2a:f0:c8:cb:1d:8c:
1b:60:01:b4:d2:8e:a2:b6:35:a8:db:e5:e2:44:29:
42:aa:d4:97:39:c8:15:e8:66:48:21:d0:f6:6b:c2:
f3:6a:8e:0d:b6:7d:4e:2e:c6:a6:68:25:2c:3a:7d:
0e:24:86:1b:2d:39:00:06:8c:88:d8:5b:75:f5:4e:
87:17:97:a6:4f:36:a5:c8:47:07:8f:18:e5:0c:20:
50:fb:81:94:90:ee:ed:69:88:4e:06:63:34:c2:47:
13:ad:0e:b3:33:79:96:58:5b:6a:19:f0:b3:1b:a1:
58:60:95:b7:00:a3:f0:4e:a0:4f:84:c2:68:fc:3c:
25:72:31:2e:ff:7c:80:b5:37:f5:08:d9:f7:b2:59:
c7:bb:19:af:e0:39:a4:87:42:b2:14:16:e8:ff:85:
5e:ea:0e:e3:52:3b:c0:52:47:50:0c:c4:78:2e:07:
95:66:b5:5e:57:da:20:16:4c:a7:6c:74:8f:6b:55:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:7F:52:07:16:B1:06:6B:EC:9C:CD:58:5C:A2:26:3D:1E:C8:18
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a7:b6:f2:db:f0:11:c8:51:85:c3:6a:89:4c:20:75:94:67:
ed:9a:f3:3d:eb:15:0a:3f:ef:3c:69:58:4a:6e:e1:b2:05:02:
55:03:b4:66:58:7b:8b:da:00:e0:b5:ad:38:16:a5:d1:b7:04:
5b:2d:c7:39:6c:34:a6:d7:a7:a5:b1:85:8c:02:d1:9d:eb:79:
51:9d:c8:8e:e9:c7:88:1b:8d:8d:1d:55:0a:8b:dc:08:d8:ae:
76:b2:43:c9:e0:bd:a2:40:91:b4:a8:19:0d:b4:50:35:cf:c1:
d7:52:38:a0:97:53:7f:5d:19:03:57:f3:da:5f:90:b7:fa:60:
15:f4:9f:5c:4c:9e:35:7d:66:05:0a:d2:d3:40:ca:cd:76:98:
a4:62:fe:36:ad:e6:44:3c:da:d6:e9:05:13:04:8d:80:ef:79:
ab:27:85:4c:d2:60:36:de:b2:09:74:31:54:06:ea:68:86:e5:
80:2a:15:ab:6d:f6:eb:45:37:12:ae:43:da:43:89:80:19:f7:
2f:5d:9b:f1:68:f8:d0:48:45:8f:cb:dd:75:50:92:ec:d1:30:
69:b6:32:e7:2b:b6:46:b1:09:d8:42:79:f8:2f:eb:9f:df:80:
f1:b5:51:b0:d1:f5:16:58:64:fa:3c:e3:9e:44:4c:eb:09:de:
b9:31:a5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:51 2025 by rpki-client