Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: ACujxvO51OWXRiMf8wFGpjr+WagUSiHzcP8UBDiS/XE=
Subject key identifier: 26:6A:18:47:BE:95:1D:20:9A:D7:49:E9:D3:F1:7C:5A:F7:89:2F:19
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 0198D65F97CC111D070172DDBFAEFF34A976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 0540
Signing time: Sat 23 Aug 2025 10:00:45 +0000
Manifest this update: Sat 23 Aug 2025 10:00:45 +0000
Manifest next update: Sun 24 Aug 2025 10:00:45 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: mlD2ZJJMcmq6SrPR4gbUnZHIp7e5+reqvxEzozyrsVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:97:cc:11:1d:07:01:72:dd:bf:ae:ff:34:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Aug 23 10:00:45 2025 GMT
Not After : Aug 24 10:00:45 2025 GMT
Subject: CN=266a1847be951d209ad749e9d3f17c5af7892f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:90:3a:7f:8d:3b:01:62:21:2c:b7:3f:09:
d4:cb:70:5f:71:79:b4:dd:fa:96:f6:80:87:76:d7:
29:2a:1f:c4:93:2e:02:a9:f3:c6:b7:59:14:19:24:
7f:0f:ad:62:73:9b:2d:59:08:27:da:41:ba:9e:d4:
47:fc:38:56:0a:66:3b:80:69:42:d4:7c:eb:de:71:
a9:80:21:ef:3f:d5:0b:97:79:a0:1e:6c:07:28:45:
c9:c6:1f:2b:f0:d4:33:f0:27:a4:af:97:22:7e:23:
64:53:8a:e5:64:53:d6:bb:29:47:b6:55:b2:b3:67:
c3:91:0e:8c:0b:c5:ff:fc:69:87:2c:66:33:09:91:
49:be:44:ba:8d:12:d3:f8:4a:e3:8d:58:32:4b:ae:
b4:df:5c:f9:7a:32:a2:63:7f:c6:4e:3b:7f:b7:cc:
7f:9a:34:68:95:2e:39:14:21:25:de:84:2b:c5:8b:
93:46:03:ff:44:77:41:c0:ab:ad:20:43:69:ee:fd:
b9:71:ec:a7:91:d4:24:6f:ae:94:07:6c:0a:00:67:
fe:4e:5b:b4:5a:30:40:35:15:77:19:c6:3c:90:fe:
0f:20:08:d0:81:77:a9:46:ba:f3:f9:01:89:43:e5:
ac:eb:93:1b:7b:48:fe:e8:fb:3a:19:12:42:b0:e4:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:18:47:BE:95:1D:20:9A:D7:49:E9:D3:F1:7C:5A:F7:89:2F:19
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1a:ed:34:95:24:05:02:64:f2:71:c2:94:83:83:43:19:05:
d8:91:da:fe:a8:da:c8:b9:86:8c:8a:a9:79:01:fc:3c:85:ad:
69:23:6b:72:2b:69:aa:2c:d3:76:53:04:ef:d7:f1:89:f4:21:
f2:89:39:f2:72:97:ea:29:79:f6:57:f9:8d:fd:78:f5:14:db:
26:e1:84:3f:7a:fd:20:13:10:d6:9d:51:42:27:4b:28:da:27:
2a:fc:36:8d:ee:d2:f5:a0:00:a7:2b:af:8d:35:54:84:db:54:
7b:24:90:d8:43:30:36:45:67:d6:43:b3:81:7f:1b:9c:fb:20:
3a:94:cb:80:e2:cf:a4:58:b8:cb:46:38:26:1e:04:3d:52:4d:
41:d9:b7:a6:19:ed:56:6a:07:61:de:36:be:9c:69:17:60:f3:
31:6d:da:14:c6:09:89:31:6a:fa:88:73:15:a6:ce:4f:58:43:
e6:9c:51:48:9d:4c:39:ee:29:e2:3f:87:50:90:ff:79:ba:57:
a5:ef:fc:c7:0a:c1:2c:6f:d0:21:2d:b4:dd:bb:d1:4f:f0:5c:
58:9c:10:52:f4:da:8b:45:6f:83:d3:71:2e:77:d1:de:8b:fb:
e0:10:fe:b7:2c:bc:13:22:81:94:8e:17:38:26:de:ae:2b:98:
e2:5c:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:50 2025 by rpki-client