Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: gLTakH6CrUA6oCanXVO90f/nFssB3Nf+WpsluUF5H7A=
Subject key identifier: A7:09:04:1A:11:16:9A:2B:8B:DA:45:5A:09:6B:28:E0:43:D4:65:7B
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 0198D5BB86AA16633056773CCE41EA42D36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: rzJhXVok63fMk/pgSlafefQQiiDJSsSvuKVr/gRKBeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:86:aa:16:63:30:56:77:3c:ce:41:ea:42:d3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=a709041a11169a2b8bda455a096b28e043d4657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:06:be:28:51:27:4f:6b:40:d7:75:65:38:
fd:c6:dc:a8:09:75:c4:46:00:2c:2e:a8:49:81:b4:
7c:44:26:bf:90:36:54:ca:be:28:4c:2f:69:44:e3:
02:c1:46:3e:28:5c:af:45:f5:25:a1:51:ab:94:5c:
45:b0:12:bf:b5:32:57:b6:11:bf:b8:92:36:69:65:
a7:80:39:9d:02:8b:44:99:18:de:88:94:8d:8a:51:
99:a0:db:d1:ca:69:78:8f:ab:af:ea:2d:6e:42:41:
2d:19:7e:d1:18:1d:41:ca:a1:a0:44:f5:d5:3d:86:
b7:37:17:cb:6b:8c:5c:1a:6a:91:82:4c:d4:c6:29:
41:6b:c9:67:df:71:05:a7:6b:26:69:16:38:c8:ca:
8c:f9:3b:16:83:9d:05:3a:c3:93:ec:24:b4:1a:cf:
1d:17:17:e6:ec:6e:54:0c:47:b2:86:e6:70:67:7d:
f9:f7:25:ef:eb:96:50:80:cc:6b:42:be:08:21:d1:
86:3e:2c:86:f7:85:69:7e:8c:62:6e:87:5c:03:5e:
57:18:43:63:db:31:fe:2c:92:e8:cd:b3:08:4d:85:
80:20:3c:5e:14:ce:af:41:e0:98:a3:2e:47:44:17:
b6:3e:80:0f:cf:8b:b0:78:87:a4:b4:0a:85:9c:33:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:04:1A:11:16:9A:2B:8B:DA:45:5A:09:6B:28:E0:43:D4:65:7B
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:a6:00:8d:2f:2e:11:6b:7c:83:76:6f:48:21:f5:cf:2d:
6c:bc:ce:f2:b5:f9:8c:9b:81:10:ec:9b:46:96:58:08:3f:5c:
a2:9d:59:5a:cd:84:e0:17:51:b8:1d:b0:1e:2c:c5:6f:4f:57:
6e:af:8f:8e:ec:58:8d:1a:99:9a:e9:79:29:ea:70:7c:2c:72:
4f:77:70:b7:cc:f4:d3:fa:ec:43:0c:9f:c2:83:70:10:39:4a:
e2:f7:68:3a:a4:08:89:e9:c9:d8:01:4f:eb:00:f8:c6:50:b7:
22:93:2c:51:d0:40:99:b1:c1:74:47:a0:8c:bb:10:7c:5d:76:
5c:fc:ab:ea:3d:03:2c:05:ea:4f:98:58:07:20:68:ce:6d:4a:
cc:d7:97:4f:86:15:bf:72:13:0a:93:c8:e8:85:8a:a9:4a:95:
a5:59:bf:a9:a0:a0:a0:ca:d0:34:0c:e5:c6:a9:36:91:04:74:
36:68:b0:ba:00:c4:e4:1a:be:26:49:5e:4d:46:b0:31:b0:6e:
4b:f1:67:0b:17:3d:0e:01:85:31:f7:1d:8a:2d:83:cf:7b:77:
4c:b8:c2:09:d5:71:c0:a5:a5:9e:b7:4c:a6:a2:f5:e9:8b:d8:
06:88:3d:6a:0e:5b:fa:4f:76:80:de:26:0f:9d:c5:99:63:f6:
91:d0:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:37 2025 by rpki-client