Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: qgzHHx1LyIbBcP4ENpYSP8AKftN8Dug1zxbKYY5mQPY=
Subject key identifier: 32:66:91:77:37:41:71:2B:67:29:22:72:DD:FD:EB:7C:56:47:35:5F
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 0198D65F74ACF0190EEB3CD3646AB058E2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: N6cOetZi6ygN4fqi8vmkqf+JgMb17cQ+ekCJAOtQ0g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:74:ac:f0:19:0e:eb:3c:d3:64:6a:b0:58:e2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=326691773741712b67292272ddfdeb7c5647355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:24:77:09:72:f7:f8:23:75:2e:ce:d2:75:
36:50:58:e4:6e:da:85:2d:ec:85:ad:f7:a8:c9:5f:
86:f9:94:ed:6f:da:25:4d:a4:bc:36:40:ad:c8:9b:
17:43:ed:c5:9b:46:1c:5e:3e:3a:4e:7e:37:d2:2d:
ee:d7:6f:60:11:e4:d2:19:16:20:bb:2b:37:7d:c7:
31:49:df:1a:a6:a7:e5:55:de:95:e7:8c:fa:fe:26:
62:8c:a5:dc:65:8c:d4:28:4e:d0:98:f1:98:5f:32:
2c:b6:63:93:94:92:b1:f7:01:9d:5b:3f:51:34:1b:
2a:61:34:7b:eb:37:b4:5e:3d:18:7c:3b:3e:76:1b:
95:a5:58:7f:9e:b0:70:b9:31:b4:72:53:ae:9f:4f:
d1:0e:e1:01:ed:e3:f3:61:65:43:55:a6:3e:24:bf:
f5:7b:0f:ce:ce:0c:a9:7f:d2:37:c2:1d:b9:99:fa:
fa:ac:07:b5:02:f8:14:b2:37:25:16:05:c2:91:5b:
ff:9e:8c:c3:b2:c7:8d:20:bb:3f:7f:83:91:9c:8e:
8a:ce:7b:7f:37:aa:09:9f:fb:c8:f6:f2:e8:de:61:
b5:9f:23:99:e6:d7:ae:37:9b:37:e2:7f:20:10:72:
cd:cc:84:94:7c:c9:8f:8c:c4:6b:41:6b:20:4d:25:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:91:77:37:41:71:2B:67:29:22:72:DD:FD:EB:7C:56:47:35:5F
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:00:5c:5e:9b:28:ee:0b:04:d7:43:a0:b3:0e:34:69:f4:
38:41:38:1d:a3:fe:5d:11:b7:7e:97:2a:ae:9b:52:ec:3e:63:
70:04:09:9b:be:bb:47:ca:ba:f6:51:e1:f3:40:47:02:25:e9:
b2:e9:88:e0:97:f0:bc:bd:3e:76:67:c4:26:32:53:fc:10:c3:
26:4e:c4:18:60:2b:a8:93:86:32:b2:2f:2a:23:03:5d:a8:a6:
d0:ce:2d:1e:78:66:af:07:54:f6:49:d7:fc:bd:59:84:21:76:
d8:16:b1:c4:c1:b4:fe:59:9a:40:76:82:89:7a:0a:6d:55:8b:
79:73:be:50:53:c5:3d:1a:0c:e5:49:05:69:05:ab:e2:26:41:
37:d9:57:fc:e0:d9:77:bf:fd:fa:f0:6a:00:a9:f6:c6:6f:bd:
35:09:e5:75:34:5c:07:4a:31:ca:2b:d9:80:dd:f8:2b:53:f6:
ce:6a:66:8e:4b:56:25:d6:eb:8c:2d:84:6a:b9:85:c9:a1:82:
46:9b:3d:92:c7:1a:23:bb:b6:d4:99:7a:b0:ce:32:a8:b7:fd:
61:70:e0:70:19:b2:f7:3e:49:5d:17:bf:54:a1:a8:22:92:a5:
f8:68:ca:16:2b:8c:cc:61:ac:a0:f6:f5:45:94:3b:9b:c8:e6:
a2:56:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:15 2025 by rpki-client