Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: vv02KeULubb0bTTCUIQLIPcLCAsU9PxExsG2G/t45YE=
Subject key identifier: 12:1E:09:1D:1C:D5:2D:4D:EC:67:45:3C:96:2C:B3:E1:50:F7:36:6E
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 0198D65F43AF0B3A4C036F9D8B1E690B91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:24 +0000
Manifest this update: Sat 23 Aug 2025 10:00:24 +0000
Manifest next update: Sun 24 Aug 2025 10:00:24 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: O27ODl/WNgzljkDeP3uqmyr3jOOs6+RMY5ctWohppaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:43:af:0b:3a:4c:03:6f:9d:8b:1e:69:0b:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Aug 23 10:00:24 2025 GMT
Not After : Aug 24 10:00:24 2025 GMT
Subject: CN=121e091d1cd52d4dec67453c962cb3e150f7366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:f9:94:56:4f:c7:f6:07:f1:67:79:79:8e:
14:67:d1:8e:1f:99:c6:cd:d1:3e:8c:0f:29:ad:ef:
f3:fe:80:78:41:c2:2d:93:a2:38:5c:55:ad:94:62:
a2:da:1a:d2:8e:84:1c:a2:28:85:12:02:d5:84:08:
84:d0:73:cb:10:f2:88:5b:94:8d:74:25:b6:75:5e:
4a:81:ed:c8:07:da:e0:31:87:5a:5e:19:a8:c4:40:
53:cb:f7:97:72:31:c7:fb:b4:67:d0:8c:90:51:e9:
fd:0d:8e:13:41:b6:f1:2b:79:6a:aa:1d:17:fd:9c:
e4:64:66:fc:7d:4d:89:f8:58:82:02:26:e2:30:d3:
f4:21:e3:ec:0f:54:ca:cd:c7:2a:f2:0a:9b:95:b5:
6b:8e:75:f4:66:fb:22:85:78:a9:fc:8a:fe:38:12:
d4:a5:7c:c6:e6:13:65:60:65:6a:b1:62:65:64:bd:
c9:72:ef:5b:e0:ce:9a:2c:fa:97:d7:8f:a3:29:7a:
e5:b8:36:91:1a:dc:ff:9f:82:e3:15:0f:03:da:53:
cd:65:a8:40:17:45:38:f0:28:57:94:8a:43:1a:ce:
56:b3:83:a8:a6:0f:fb:93:dc:1c:02:20:0b:7f:81:
d4:9c:c6:a4:e5:0a:32:b1:4d:b5:f5:63:f7:02:e9:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:09:1D:1C:D5:2D:4D:EC:67:45:3C:96:2C:B3:E1:50:F7:36:6E
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:5b:34:06:c9:cb:ea:6f:3e:d4:54:ee:d6:49:ce:6b:4e:
94:91:e9:46:fa:e5:ea:f5:ad:ca:7e:c5:3a:40:87:e8:82:cc:
05:9d:ec:e6:94:59:fa:96:d9:10:5f:48:e0:4f:22:66:9a:58:
e6:3d:a6:96:b0:f2:7b:1a:33:34:31:73:85:c4:27:6f:e5:27:
be:0a:a4:14:4b:f5:ee:d3:e9:08:9a:88:dd:53:20:68:ab:0b:
b4:9c:84:80:f9:c2:fe:60:1f:39:f6:51:01:c9:b7:4d:9a:e4:
10:bc:6f:a5:f2:05:07:53:2e:44:d7:dd:a6:c9:c7:da:68:54:
1d:0c:ef:e1:fa:32:9f:a3:85:24:86:a5:99:c5:60:b6:7e:72:
d3:4c:c9:40:43:f6:f6:ef:f1:14:b1:8f:2f:5d:df:d6:c8:71:
af:e4:28:b0:a9:c6:a4:f0:77:50:49:8f:73:18:3d:0e:0b:62:
bb:81:76:68:ec:70:f9:7c:a5:13:bd:4b:d9:a0:1d:53:bf:90:
64:5b:5e:36:cb:e6:0a:d0:52:56:db:64:5c:a4:5b:9e:71:c4:
05:98:15:a1:93:f1:5f:07:cb:b1:a8:31:8b:3d:bf:7d:c9:8a:
38:9e:d2:65:bc:21:65:69:a8:5d:aa:91:f2:c5:df:26:13:e9:
29:ec:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:16 2025 by rpki-client