Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: UDOOA4cYxiIphIOO9oo5b6+CnPx1Ua4n+sIZuaKg0YI=
Subject key identifier: 41:E8:DB:0E:E6:27:A1:A0:90:08:1F:C8:A4:AF:0D:71:57:A2:62:83
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 0198D66105428F5E6D12AB8C47F80E60741D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 14BC
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: nJYL/F6czQaJ0Z4h5GpUL1sC8VZS1rV0A+md8kROzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:05:42:8f:5e:6d:12:ab:8c:47:f8:0e:60:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=41e8db0ee627a1a090081fc8a4af0d7157a26283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:3e:ff:2c:7c:f6:ca:ab:34:8a:0f:5d:db:
66:74:fa:13:cd:1d:d0:ca:f5:b9:39:fa:42:86:35:
f0:46:2b:b9:8d:86:f8:af:f1:63:0e:dd:2d:e2:0b:
78:74:39:fe:9d:09:ac:3b:99:2d:47:3f:25:bd:e1:
14:8c:77:9a:c9:3d:1a:7d:03:81:4b:12:17:c4:ec:
63:ac:93:eb:a5:2c:e4:d9:10:cc:25:bc:83:1b:68:
f3:80:05:73:2d:2c:44:37:00:30:09:71:4a:19:e4:
3d:e3:18:3b:12:d2:be:7c:7b:91:b7:21:81:07:5b:
00:59:7d:62:56:c7:48:e2:38:de:fe:0f:90:42:cf:
0f:1d:45:55:10:eb:73:a7:9b:fe:6f:f4:44:22:08:
44:7d:ca:35:9b:d4:ad:ab:9f:9b:43:ef:28:e8:98:
c5:5d:5e:66:ea:a0:e7:74:cc:c2:0d:0c:da:75:cb:
fd:2a:49:10:b5:cb:b0:76:5a:c6:c5:2a:2d:82:70:
f5:24:7d:1c:29:8c:74:1b:01:6e:9d:90:8b:9e:b9:
e7:13:03:01:f3:79:ca:e6:b9:9b:fc:e8:e5:50:30:
85:ef:68:14:0a:53:4e:65:ab:59:4a:28:9b:3f:af:
ac:da:50:68:56:e9:4e:4c:4d:b2:37:35:e1:e3:9f:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:DB:0E:E6:27:A1:A0:90:08:1F:C8:A4:AF:0D:71:57:A2:62:83
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5a:37:d7:e2:46:1c:9e:23:83:ed:70:89:39:4b:21:56:0c:
18:59:7a:aa:bc:72:05:8f:3b:95:eb:03:79:b7:de:51:65:c4:
1a:4e:7f:0d:25:50:7f:c3:5a:3b:39:54:ac:ef:8e:76:c2:b6:
a0:6c:b9:61:ce:38:9e:20:db:20:e5:2b:b0:b8:02:2b:0a:ab:
ca:df:58:ae:6f:f5:d7:14:22:82:cd:4e:dc:09:0d:9e:23:21:
13:9d:b9:71:71:57:24:c7:96:81:e7:1b:8c:f5:ce:c4:9b:17:
02:20:cd:c6:98:43:1d:74:79:5d:74:f6:14:1a:13:5b:49:12:
93:1d:9a:55:29:4a:c4:82:fd:77:48:c0:ca:17:f2:0f:e9:c4:
8f:0c:88:39:e4:3b:9e:a6:fb:e6:b4:04:7c:8c:76:8e:6e:09:
a2:77:3f:7c:57:0d:40:44:3f:94:96:67:be:46:d4:e7:2c:70:
db:64:09:55:5d:78:4c:51:9c:32:5f:a7:50:c0:11:5b:72:91:
b2:80:29:42:3e:da:2b:ae:e5:58:57:80:85:3c:a3:99:d9:2a:
22:e7:92:38:22:8d:18:81:2b:ea:a2:d9:9b:d4:0c:c2:3a:0c:
d2:9c:59:ad:57:f7:a0:51:a0:49:97:d4:dd:e5:19:8d:ed:d2:
b8:b4:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:22:53 2025 by rpki-client