Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: px0tFt2eSgRGNvvDC3fHRUhf5M7vXY18MjbGzzR+bzs=
Subject key identifier: 2B:7F:6D:07:F1:F8:08:2E:EC:A0:AD:58:2F:00:6C:A3:A0:5E:10:45
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 0198D472A6ED250308970DF787E4678177E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: j1RaL/08ZwUtrFwrSC9XpwYhFeM7VgEPuC3rtE1OMg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a6:ed:25:03:08:97:0d:f7:87:e4:67:81:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=2b7f6d07f1f8082eeca0ad582f006ca3a05e1045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:73:55:c1:46:b9:f6:8e:a8:be:da:ee:00:
28:21:7e:5d:03:11:7f:ca:7a:b6:d9:e2:77:e6:23:
06:da:cd:9d:6e:d7:63:76:b8:17:53:df:e9:e9:9d:
44:74:f5:e1:31:ef:a5:8e:24:04:01:29:be:06:fc:
85:71:c8:5f:6c:c1:20:11:68:0a:25:1e:ec:96:67:
75:e8:9b:73:27:4a:74:e1:a0:d1:83:7f:b4:a4:ad:
2f:ba:73:58:5b:f5:f1:0e:d1:07:1b:d8:57:05:e4:
20:9a:93:fe:81:9d:fd:8d:12:1b:8b:1b:a6:71:08:
4f:c8:d3:a9:cb:8d:23:5f:c9:18:43:57:ac:62:8d:
33:05:79:73:76:23:f8:6e:01:ba:60:b1:a3:98:5d:
d4:6d:37:ea:b4:6b:a0:6f:49:4f:d1:95:fa:92:16:
92:e2:16:22:5a:fa:c1:5b:7d:de:bb:8f:47:9f:f1:
c5:79:51:6b:6e:38:e1:71:62:1d:6b:ab:ca:ff:cf:
0e:bc:8c:f0:a4:32:b2:ab:bc:9a:34:9d:1d:82:40:
02:46:f8:63:80:e1:81:3a:35:34:61:ee:7e:38:d7:
f2:38:f2:15:56:6e:2c:11:8c:af:5b:c7:60:4a:93:
e3:e1:88:38:ff:02:85:2c:1e:b5:ce:c7:83:04:82:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:6D:07:F1:F8:08:2E:EC:A0:AD:58:2F:00:6C:A3:A0:5E:10:45
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:01:ca:e9:36:38:47:a1:bc:74:9b:df:aa:9c:d5:2d:70:ff:
b8:ea:fc:06:38:cf:5c:d0:35:86:88:ff:63:3d:f4:d0:34:8b:
b7:d8:f8:23:99:a0:fa:10:74:41:d4:48:5c:17:21:55:ec:fe:
25:f3:ec:a6:32:58:68:80:c9:a8:0e:2c:f7:36:f3:25:58:58:
10:2e:5b:dd:b0:59:3f:98:15:41:60:59:0a:c5:a7:74:55:e8:
9c:47:5a:b0:60:41:17:3f:83:59:ee:88:07:65:04:ee:1b:80:
16:08:7e:05:3a:1d:43:2e:92:e0:81:f0:e5:1f:2e:36:2e:79:
13:a8:27:73:ec:7a:37:7b:ae:f2:fe:1a:17:4a:34:c5:61:47:
77:98:61:bc:08:63:d0:ad:d1:20:21:a9:af:d8:39:f6:85:d1:
ef:f6:67:8d:e2:78:a0:5b:01:6e:e5:33:38:52:b5:e3:f3:d6:
4f:ef:db:9d:7e:b3:57:85:cc:8a:1e:32:a1:6d:84:a2:bd:fd:
71:74:d2:1b:5f:53:b0:d8:8d:ef:ef:dd:cc:7d:45:0c:ef:cc:
3e:b1:5e:91:f2:05:cf:0b:20:66:71:3e:da:3d:f7:d1:55:3d:
3c:44:19:3c:5d:0c:1b:21:ed:01:ed:6a:1e:f2:fb:3f:5a:cb:
be:95:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:50 2025 by rpki-client