Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File: jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier: iLP9QjVTsiITJnQF2OMzCviagDv8lbfm7ymkc0+m1g4=
Subject key identifier: 60:DB:1C:16:69:D1:F7:BE:F0:B6:4B:FA:B3:5F:C7:6C:C9:41:B5:C8
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer: /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial: 0198D660C88D40D7A95BDC84DB93DCF6F17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: 9G4VrrwAT6kcUCjqa2GPNbhJ0Vsqni18PLbaByS+xRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c8:8d:40:d7:a9:5b:dc:84:db:93:dc:f6:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=60db1c1669d1f7bef0b64bfab35fc76cc941b5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:be:18:f8:7e:92:96:54:2b:92:27:4d:62:
80:2b:3f:85:87:b4:d1:1f:ee:7c:e5:33:1d:53:62:
a3:43:7b:60:2d:ea:c3:f6:6a:b7:48:72:29:90:e8:
05:fb:c2:51:d4:37:27:29:d8:4c:b5:9a:6a:0f:7a:
2f:a8:dd:5f:96:b5:91:c5:9d:3a:ab:d4:12:90:6a:
ea:7a:38:63:4f:fc:32:60:1e:69:5d:f5:2b:63:70:
e1:bb:44:fd:83:08:91:16:8f:58:e5:ef:56:e1:bf:
49:a0:dd:f8:e8:10:67:2b:0d:92:a9:ba:f6:d1:5b:
8f:57:f3:d2:76:32:3d:78:94:c7:f6:22:3e:d9:c4:
3e:01:b3:e1:c7:b2:e6:5b:7a:f0:80:46:bf:26:3d:
77:f1:59:4c:f6:6a:b3:a0:87:d3:c6:19:63:ab:c1:
d0:b6:40:54:18:66:42:d3:f2:54:ea:72:5c:bf:95:
73:36:c4:fe:6b:6e:06:68:ce:7e:ab:78:6f:fe:ee:
fb:1f:50:dd:8d:33:bc:47:c7:13:f4:09:e7:e5:1d:
1c:ad:e8:b1:a9:9a:d4:ad:f5:7c:c3:e9:6e:ea:d2:
5c:17:89:8f:d8:c0:13:5b:70:16:50:5f:9c:40:cf:
92:53:a4:01:2f:5f:57:3d:a8:54:43:72:08:f9:2e:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:1C:16:69:D1:F7:BE:F0:B6:4B:FA:B3:5F:C7:6C:C9:41:B5:C8
X509v3 Authority Key Identifier:
keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:37:a9:88:7d:8e:6c:f3:e5:a0:d6:ff:4c:5a:25:e0:1f:c8:
eb:ea:5d:f1:41:3b:d1:4e:c2:d2:6e:45:a1:7c:66:17:b7:13:
67:51:c9:23:68:04:22:68:46:e8:61:d7:da:99:53:d2:c8:30:
61:09:3a:e9:9d:a4:bb:d0:24:09:b3:93:13:f4:60:ae:c6:da:
ba:d5:f5:a9:40:cf:5d:62:8b:bf:75:b2:c0:54:99:c4:d6:ca:
ca:d6:ee:92:be:fd:c3:7f:43:e2:90:3a:fd:43:be:65:d3:83:
ff:63:0e:8d:ce:0d:0b:dd:94:79:27:1d:7d:fc:18:84:c1:ef:
51:72:71:94:d4:d6:e7:8f:74:7f:7f:94:c0:7f:d6:46:52:81:
9b:f0:08:36:b6:e3:81:2a:40:e9:de:40:ca:19:35:a2:93:6b:
1a:97:cd:64:e3:36:fe:d1:c7:ec:ce:7f:e9:cd:96:ec:1f:1f:
1f:90:80:48:bc:d4:a6:64:d1:df:f1:e8:30:30:32:8d:60:fb:
9d:a9:f6:cb:65:5b:f7:d4:0c:9f:79:35:d0:26:3b:52:20:be:
65:0b:02:2a:65:99:96:2c:df:6a:7a:13:fa:f5:11:43:aa:80:
bd:07:b9:1c:8e:98:55:f8:2a:bb:6e:d2:d8:2e:73:29:2b:17:
15:65:12:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMiNQNepW9yE25Pc9vF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTRmMTc2MTFjZWI0MTMxODRhZGM5YzE5YWVmNTA4YTg0
OWI5YjIwHhcNMjUwODIzMTAwMjAzWhcNMjUwODI0MTAwMjAzWjAzMTEwLwYDVQQD
Eyg2MGRiMWMxNjY5ZDFmN2JlZjBiNjRiZmFiMzVmYzc2Y2M5NDFiNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6C+GPh+kpZUK5InTWKAKz+Fh7TR
H+585TMdU2KjQ3tgLerD9mq3SHIpkOgF+8JR1DcnKdhMtZpqD3ovqN1flrWRxZ06
q9QSkGrqejhjT/wyYB5pXfUrY3Dhu0T9gwiRFo9Y5e9W4b9JoN346BBnKw2Sqbr2
0VuPV/PSdjI9eJTH9iI+2cQ+AbPhx7LmW3rwgEa/Jj138VlM9mqzoIfTxhljq8HQ
tkBUGGZC0/JU6nJcv5VzNsT+a24GaM5+q3hv/u77H1DdjTO8R8cT9Ann5R0creix
qZrUrfV8w+lu6tJcF4mP2MATW3AWUF+cQM+SU6QBL19XPahUQ3II+S747QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDbHBZp0fe+8LZL+rNfx2zJQbXIMB8GA1UdIwQY
MBaAFI4U8XYRzrQTGErcnBmu9QioSbmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhUeGRoSE90Qk1ZU3R5Y0dhNzFDS2hKdWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS84MWQ1NmQtMWY1Mi00YTliLTk1OTEt
NzIwZmQzYTFlZWYzLzEvamhUeGRoSE90Qk1ZU3R5Y0dhNzFDS2hKdWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS84MWQ1NmQtMWY1Mi00YTliLTk1OTEtNzIwZmQzYTFlZWYz
LzEvamhUeGRoSE90Qk1ZU3R5Y0dhNzFDS2hKdWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDepiH2O
bPPloNb/TFol4B/I6+pd8UE70U7C0m5FoXxmF7cTZ1HJI2gEImhG6GHX2plT0sgw
YQk66Z2ku9AkCbOTE/RgrsbautX1qUDPXWKLv3WywFSZxNbKytbukr79w39D4pA6
/UO+ZdOD/2MOjc4NC92UeScdffwYhMHvUXJxlNTW5490f3+UwH/WRlKBm/AINrbj
gSpA6d5Ayhk1opNrGpfNZOM2/tHH7M5/6c2W7B8fH5CASLzUpmTR3/HoMDAyjWD7
nan2y2Vb99QMn3k10CY7UiC+ZQsCKmWZlizfanoT+vURQ6qAvQe5HI6YVfgqu27S
2C5zKSsXFWUSuw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:26 2025 by rpki-client