Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: Y4LLjrpbRjVsXwEtjANQdo8cNzJdFROM54M87uWemh0=
Subject key identifier: C5:32:A5:63:5F:B2:F9:31:9F:99:C9:EB:CC:78:66:AB:CA:06:9C:8F
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 0198D473A214F994BA411BF2E28ED8D02306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0B9F
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: kr5hCuRZqiLXfRYzIfyZZPC8nTkgPRXO7PdGlq+fq/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a2:14:f9:94:ba:41:1b:f2:e2:8e:d8:d0:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=c532a5635fb2f9319f99c9ebcc7866abca069c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:2a:76:c7:06:53:98:b3:94:84:2a:3c:6a:
19:a8:3c:b0:1b:bb:f0:f7:e6:f6:b5:3a:1f:22:8a:
c7:04:73:82:3b:b4:5b:19:a5:5e:3b:f6:0c:7e:a9:
27:f4:36:12:97:82:d3:ce:b8:a0:6d:2b:ed:c0:8b:
a7:fb:63:a1:33:22:07:ac:ef:f1:e7:95:5a:0a:78:
9e:4d:6f:7b:9a:30:7f:97:a7:86:9f:ec:68:37:0c:
13:e9:e6:6c:eb:36:2e:1f:5d:b9:27:c9:be:55:ce:
fd:9e:ac:47:80:08:4a:fc:3d:36:d1:27:85:2a:55:
44:78:bd:76:de:65:c9:a0:35:ae:ca:3e:ac:98:29:
0a:a1:2b:e6:8c:73:64:5e:42:13:65:c8:af:ec:de:
59:52:99:cd:85:13:b7:c0:19:10:6b:c0:85:bc:c9:
c6:75:a3:07:6b:0a:f6:80:85:3c:e7:ae:54:67:52:
03:58:14:64:a5:6b:e8:75:2a:6c:2e:a7:3a:c8:04:
ff:98:8b:1e:f9:35:f9:eb:90:d1:2a:22:e3:6d:de:
7c:0a:ea:1c:e8:d3:f5:7a:98:d6:46:6e:d4:d7:53:
a9:ce:f2:51:65:b7:76:e9:3d:00:e3:29:12:18:b0:
4b:56:eb:68:88:35:7d:b0:65:01:ba:aa:fb:ee:61:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:A5:63:5F:B2:F9:31:9F:99:C9:EB:CC:78:66:AB:CA:06:9C:8F
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7f:df:f1:b0:03:f0:aa:05:92:00:7e:bb:d4:3f:a0:fe:d9:
72:a5:b5:c5:f1:44:8b:43:e6:32:51:07:39:bd:09:5c:67:2e:
f8:af:ea:b0:aa:ba:c1:fc:de:d0:0a:91:70:e4:5f:56:a9:d8:
e6:19:c3:cc:da:1e:57:db:a3:00:28:91:56:b5:60:2c:7d:8c:
84:3b:b8:ad:ea:2c:2d:38:0e:e0:b7:ce:d1:b8:66:1e:27:6b:
2f:f2:f7:f4:f6:14:e3:6c:6d:c4:cd:2f:82:65:78:a8:45:8f:
f4:11:dc:cd:03:fc:b7:ba:05:b4:e1:c8:2f:dc:13:08:9d:34:
e9:32:d4:47:de:0d:9b:e9:97:01:3e:b1:9a:fa:92:87:96:f8:
d4:65:12:01:8b:54:16:a3:5d:b3:9e:ef:34:5d:5b:96:20:85:
01:44:2d:a9:63:31:c5:9c:b5:c4:9d:f3:81:cb:c3:96:97:60:
0b:9f:8e:fd:99:27:b1:6a:ad:6f:d3:ac:e2:55:48:8a:a5:79:
49:f9:13:a9:d7:e7:48:9f:85:35:70:56:c0:f0:18:b8:df:d6:
7c:da:7a:97:9d:12:20:35:b7:83:f3:49:7f:36:39:ce:01:de:
e0:cb:ff:6b:a1:c1:f5:94:57:c2:90:66:40:57:68:06:14:c3:
d5:fc:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:25 2025 by rpki-client