Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: tzybZ2TIHTVokWcjnVjFT/UjYh/C7N7bMZ1uknkz3Ts=
Subject key identifier: 4D:62:C8:93:54:F4:A9:6C:DD:A1:DB:76:DF:31:E5:86:02:EF:6F:60
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 0198D66135EE898E9D7FD61332AA4E186833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 0E27
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: 1x/DWiaKT1TpROVEXVnAogCwHDFlzU3AUtdWmNxb57o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:35:ee:89:8e:9d:7f:d6:13:32:aa:4e:18:68:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=4d62c89354f4a96cdda1db76df31e58602ef6f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:6f:9f:3b:65:73:30:f8:b3:be:e8:44:bb:
b3:ad:97:81:b8:41:0b:d2:e3:8e:6a:ff:45:b0:a6:
21:8a:64:f0:20:26:79:91:0c:03:40:de:90:8c:52:
bf:a6:37:65:05:a6:5d:4f:8c:82:83:76:66:bb:5a:
2f:ed:dc:13:8f:41:9a:54:ad:f2:fb:cf:39:cb:a4:
12:6f:37:18:82:95:fd:1e:9e:67:95:67:12:d3:ad:
57:99:bd:8f:1e:ab:05:0c:30:d6:c0:09:26:de:7a:
cc:73:86:08:1d:5f:23:53:de:14:0f:05:cb:bb:68:
e5:f9:1e:35:f8:22:77:e2:be:10:ca:a1:0c:41:ba:
15:3b:f4:fe:60:95:98:8b:a0:5f:33:02:17:f9:e3:
21:62:ea:45:cc:86:fd:ee:36:45:59:83:71:90:3f:
de:0c:5b:43:58:34:a9:b5:e1:12:b3:dd:73:83:55:
81:85:48:56:50:20:d5:ea:8e:8d:aa:8d:a0:85:fa:
9d:89:09:64:24:b0:01:26:a7:ce:76:45:c7:71:20:
95:81:84:b8:cc:b1:10:66:96:28:50:1d:d0:64:34:
ed:cd:b3:dd:dd:1a:3e:2c:27:6c:a9:4c:40:79:13:
78:6f:18:2b:1f:a8:de:57:59:03:fd:af:a5:38:0c:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:C8:93:54:F4:A9:6C:DD:A1:DB:76:DF:31:E5:86:02:EF:6F:60
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:54:6c:9c:d8:21:93:db:b2:a4:45:a4:c5:3c:29:9c:8a:7c:
59:a3:41:e8:dd:cd:92:03:90:93:09:ce:21:55:17:a9:a4:1b:
34:d6:e4:46:aa:d8:ac:27:63:07:ff:e0:6b:15:bc:f2:68:06:
9b:a2:b8:20:c9:eb:c9:42:78:bc:2e:35:fb:76:66:07:4a:97:
f1:5b:ef:5e:5b:1b:ad:ef:4c:c9:c6:80:0a:14:7a:7f:20:c9:
ed:97:a6:89:9d:1e:8d:1d:29:da:0c:45:4f:cf:13:c9:7e:ee:
c9:5a:ef:69:37:5b:29:c1:ed:4f:c6:e4:35:e3:8d:86:7f:e9:
97:97:d5:f5:86:e0:6f:f4:62:7c:a2:ce:07:6b:48:e4:73:24:
33:fe:0b:2d:00:62:85:4b:6e:d0:93:0b:52:c9:3e:a9:ef:57:
f6:f0:ff:c0:0b:49:8a:8a:ed:d4:ca:d8:58:58:e0:a2:45:48:
c8:83:96:22:cf:7f:3a:59:1d:97:a0:ab:79:fa:59:69:aa:4a:
3c:d4:27:16:e7:97:d1:f0:36:5e:43:3e:06:39:bd:e3:c5:97:
71:4a:7e:f7:fe:27:dc:00:ba:2a:71:26:6b:fa:5c:fc:9e:ce:
77:24:5e:ad:71:a3:09:69:36:c3:00:2e:1d:3d:57:17:2c:3c:
4d:8b:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:37 2025 by rpki-client