Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: 4H5AXNcoyTBgnR3d1irFEhXxMLmD6rkRpUqdaokgLRs=
Subject key identifier: 74:0A:E5:96:0C:C4:55:F3:71:4D:4D:B6:0F:80:06:F9:A7:75:18:96
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 0198D698596B201FB353BC47F53E22BF7617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: CB
Signing time: Sat 23 Aug 2025 11:02:45 +0000
Manifest this update: Sat 23 Aug 2025 11:02:45 +0000
Manifest next update: Sun 24 Aug 2025 11:02:45 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: Odg/T56DHH8b9U7H6XdnHfIon1UVukcOLpjy7ytuQBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:59:6b:20:1f:b3:53:bc:47:f5:3e:22:bf:76:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Aug 23 11:02:45 2025 GMT
Not After : Aug 24 11:02:45 2025 GMT
Subject: CN=740ae5960cc455f3714d4db60f8006f9a7751896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:3f:86:31:6c:41:64:e7:2b:94:3f:9a:ad:
4b:d0:8a:f7:9c:e7:29:e4:a7:ff:46:f6:2d:67:9b:
69:aa:27:7c:a6:d2:8d:e3:86:95:31:5c:b3:13:4e:
13:2f:0e:66:d7:60:e8:4a:34:ee:25:a4:08:78:6b:
bb:72:60:70:aa:7c:be:47:f2:48:62:13:aa:1a:78:
79:d2:33:4b:55:28:7b:8e:33:68:33:80:38:4d:ce:
21:c7:e4:88:c6:b1:18:d4:03:af:b9:8d:df:9f:46:
ba:56:e9:ab:51:ae:ca:78:f0:8f:7d:9d:20:e0:0e:
3f:af:ae:7b:24:7c:4b:a6:6c:16:97:72:88:ab:f9:
9c:5d:60:a6:b2:63:6e:79:58:46:c9:3c:cf:2b:65:
8c:76:52:cc:68:2f:9e:15:c8:15:b5:3d:a7:78:f4:
a1:dd:16:b7:cc:d8:a7:84:06:d8:d1:aa:6a:d5:6d:
1e:96:dd:db:44:1d:dd:a3:64:05:87:e7:f4:71:b2:
a6:80:de:8b:13:72:a2:07:b7:8d:1e:6f:23:89:a9:
f2:71:f9:ac:6f:22:8a:c4:2f:bc:b2:d5:c2:d0:7c:
95:cd:21:78:d4:3a:90:d8:2d:2c:62:a8:9a:a8:d0:
ce:e1:0d:af:d5:e4:e6:ff:c2:58:39:6e:cc:b4:75:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:E5:96:0C:C4:55:F3:71:4D:4D:B6:0F:80:06:F9:A7:75:18:96
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:91:97:19:bb:bf:e2:cf:dd:1e:2b:b9:dc:5b:8d:2c:dd:
7c:0e:b9:27:52:3a:da:7e:61:72:0b:0f:8d:78:e9:0e:1a:ac:
15:8f:c4:35:6b:9f:c5:d0:89:f0:d1:85:7f:47:7c:8a:1f:80:
c2:0c:8c:eb:bd:32:29:6a:25:e2:9e:3e:b6:d4:73:eb:86:66:
67:c6:2e:ac:02:cb:ed:78:70:08:4d:07:15:91:6e:cb:3a:02:
07:8d:64:ed:4e:13:8a:6b:8d:9c:e9:ad:f9:ed:44:0c:68:70:
02:a6:99:7a:d1:e9:c6:ea:79:79:d8:e5:29:02:b2:96:79:75:
55:dc:9e:5e:1f:58:b7:71:40:ba:76:fc:3b:36:15:9a:4f:2c:
3e:b1:a8:2c:8b:1b:55:9a:4e:fe:cc:f3:77:b3:e0:65:a9:73:
7f:7a:2c:d7:20:14:51:07:68:ab:ac:45:2d:e2:33:eb:76:1c:
18:21:74:68:77:71:c3:92:84:9c:ee:d0:31:fa:a4:b5:7a:3e:
e2:2b:39:c3:df:1a:ed:d7:21:87:fe:d3:9b:9b:ea:ff:31:11:
1e:45:84:c3:59:ef:31:3a:f3:64:96:92:ce:03:2a:68:6f:dd:
c1:21:f7:5c:2a:e3:1d:fb:a0:fc:07:60:cb:cf:6a:28:8d:d5:
b8:46:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:38 2025 by rpki-client