Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier: zj3JD47fp2CIb58z1V9XVgOTHx3J36O2HJorrfhvE5E=
Subject key identifier: 5A:34:6E:1B:3E:BE:88:C7:90:A2:DD:CC:31:94:80:16:81:8A:18:6A
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial: 0198D66072A594927CD9A38F87464CDC4BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number: 0938
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: w/hPMJMg5HYFj3Gd7KmPcxqjUccA5DqWxgvux5iV2uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:72:a5:94:92:7c:d9:a3:8f:87:46:4c:dc:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=5a346e1b3ebe88c790a2ddcc31948016818a186a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:b3:97:70:f6:9c:bc:8f:54:41:2b:5f:ce:
5e:90:c8:64:0f:18:1f:09:ab:a7:21:40:e9:46:08:
95:a0:ff:b7:ff:23:ea:95:7e:68:7b:ed:09:83:16:
01:06:5b:7f:31:8c:56:50:36:e2:2d:46:71:dd:48:
95:3c:3a:eb:73:47:a2:8c:ab:f6:99:68:92:58:93:
75:92:a2:f9:e6:cc:55:6e:18:47:33:63:85:73:66:
18:e6:a1:44:c2:78:db:e3:37:50:21:29:0a:4f:ce:
5d:a5:5f:0f:04:0e:4b:56:fc:7b:8c:59:52:59:c4:
a9:21:84:65:92:48:15:98:d4:b6:2c:9f:4b:09:6b:
4a:7e:3d:0b:9c:59:51:91:2d:67:05:35:9f:bb:73:
23:30:ff:48:2f:85:04:89:52:6b:65:f2:30:92:0f:
2c:8d:b5:f8:34:45:47:4d:cb:7d:cc:f0:34:9a:76:
10:f1:fa:01:59:b6:50:b2:3d:6e:e1:48:8c:d9:16:
ae:b9:c0:3e:4d:9e:28:0f:b8:38:58:4b:64:78:90:
8a:6c:52:bb:96:23:bb:2c:5d:38:53:17:3b:65:07:
41:02:cf:f6:d0:9d:c7:48:6e:3b:ff:a2:2e:6c:27:
f6:cc:20:42:be:f5:04:6e:5b:62:2c:f9:12:2c:7c:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:6E:1B:3E:BE:88:C7:90:A2:DD:CC:31:94:80:16:81:8A:18:6A
X509v3 Authority Key Identifier:
keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ed:2d:e9:ec:39:8a:23:db:35:89:78:20:f4:70:1e:ea:00:
57:56:18:61:95:56:97:4b:90:cf:b3:9e:2b:e3:80:aa:69:e3:
77:52:25:72:c3:d7:f4:7c:c6:df:3d:dd:55:ac:a3:09:eb:bd:
54:10:77:78:93:7c:3f:a5:9d:63:86:7e:94:c5:37:ad:a1:95:
73:ff:2b:22:55:5a:fc:6d:28:d9:64:b2:9e:b5:a4:56:6e:6c:
e6:7c:48:a3:2b:1c:31:ea:a0:ec:51:eb:94:4c:bf:5e:09:37:
01:83:e0:77:f8:a9:25:53:b7:13:7f:ce:8b:43:9e:75:0c:b8:
c5:80:0e:e1:d5:28:20:dd:8a:3c:eb:24:14:52:38:1d:b5:50:
be:d4:01:7d:3c:f1:68:e7:5d:1e:1f:ac:a4:cd:44:99:a3:1c:
c2:16:51:19:bb:de:44:27:ac:0f:27:b7:6c:79:11:6e:88:19:
85:30:39:ee:04:d4:fe:b3:9c:77:a3:8b:97:38:7c:0c:19:ba:
b9:f0:fc:88:44:11:68:ca:9a:ad:c2:76:ca:9a:d4:5a:dc:03:
b0:89:42:68:fc:d3:ea:94:6d:7d:e2:60:01:6c:73:fa:4d:48:
fc:34:e0:32:c7:dd:c1:31:cc:2b:92:9e:16:0c:9a:e3:08:a4:
27:52:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:15 2025 by rpki-client