Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: 5ZBW8//dfiprVmpfqQr84pyOhLZJWjSidi01d71wTpE=
Subject key identifier: E5:A0:FD:29:5A:E7:10:F4:4A:C3:05:6F:8F:F9:6F:72:CB:2F:CC:A1
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 0198D4E09A31A3AC74590657A61A74FB8F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: op3kIzopzJOufKs6/IU2sxQeRNqjn+PxA2unltHdA6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9a:31:a3:ac:74:59:06:57:a6:1a:74:fb:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=e5a0fd295ae710f44ac3056f8ff96f72cb2fcca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:cb:5d:d3:cf:5d:d4:f3:29:4d:65:0a:d8:
57:5e:6d:11:bd:fd:1c:1b:e9:97:4b:f2:a8:0d:27:
39:1a:db:8d:8a:2e:e2:64:e8:77:8e:3c:1e:dc:f5:
7d:8d:7f:96:38:c2:34:f7:35:50:37:b3:43:ff:ce:
9a:1d:f8:f3:49:03:52:48:67:58:6b:f3:a5:2a:ae:
16:5d:ce:19:5a:eb:56:19:98:fb:6b:7b:f1:8a:22:
48:88:92:b2:e2:8c:f7:c3:88:ec:08:3c:75:ea:4a:
bc:89:0b:c5:99:f0:48:79:5e:2c:b0:89:06:b8:7f:
92:68:95:1c:6d:a7:5f:ae:8f:3d:e0:92:b8:64:1f:
24:5b:0b:1b:e5:25:59:8f:e9:fc:e3:29:19:01:12:
3a:f1:cc:bf:1a:d0:f6:ee:75:3f:31:5a:e1:93:c2:
15:90:e1:88:f7:93:07:63:e0:a7:54:9b:38:b5:06:
ad:db:bd:70:2d:72:e5:96:16:f6:8f:a7:a0:29:7f:
40:e9:00:06:be:04:0d:53:a7:19:49:81:7a:3d:4e:
e0:9a:c4:a6:18:89:c5:2a:84:a7:d7:0d:d1:ff:a5:
cb:0f:1b:45:f9:0c:02:d8:09:eb:c3:98:88:7d:f4:
e3:17:f5:3c:73:b3:94:ba:c2:4e:84:12:0b:e1:95:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:FD:29:5A:E7:10:F4:4A:C3:05:6F:8F:F9:6F:72:CB:2F:CC:A1
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:63:9f:12:1f:3b:42:ba:c0:55:aa:59:aa:8b:1a:83:b3:34:
d1:5f:f6:f8:e8:b6:8d:2c:06:ff:7d:1d:7e:94:93:34:ee:7c:
39:ed:c4:29:a0:e5:b9:d1:53:f4:c2:1c:e6:ae:f1:a7:7c:51:
94:39:1f:80:1b:ca:62:9f:a5:14:04:78:2b:b9:da:ee:1b:33:
95:07:0f:a0:a3:8e:7f:89:96:28:08:8d:d1:e2:52:f7:dc:36:
80:13:72:44:63:3e:6b:22:22:5a:17:70:c9:bc:74:9e:6c:95:
a0:a3:4d:8c:6d:e0:d2:9b:4a:bb:8e:1d:b5:bc:8d:e7:df:be:
e8:f5:4a:15:8e:f6:c4:4f:2c:f5:18:ae:8f:cf:77:5a:55:3f:
ae:dd:9f:57:a3:27:74:7d:d5:fe:0b:87:e5:48:86:54:10:d9:
ac:55:ca:71:e4:54:58:66:c4:c4:3c:ab:0c:42:2a:b3:d7:f2:
a4:71:56:48:19:9b:a7:e7:bc:21:af:14:dc:e7:b1:52:4d:05:
ab:e9:16:e3:3b:9b:ce:f9:32:d6:b5:0a:c9:b8:01:ce:d3:94:
f5:34:cf:71:4f:bc:3e:bb:7c:b7:60:40:2f:5c:6f:04:d4:43:
d2:bd:37:a8:8c:d7:8c:88:48:8a:c1:9d:1b:4a:58:fc:de:53:
e7:44:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:41 2025 by rpki-client