Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: zVvtaOtIgbvZGO/QTeH56titULxTLCG2S9Q7chhVqaE=
Subject key identifier: D7:93:5F:28:50:AE:91:61:8C:8B:08:3A:58:EC:51:5E:D9:78:EA:53
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 0197C56F417EE1A1A627058CA64F9645E7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 0655
Signing time: Tue 01 Jul 2025 10:01:32 +0000
Manifest this update: Tue 01 Jul 2025 10:01:32 +0000
Manifest next update: Wed 02 Jul 2025 10:01:32 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: sIgCTe6y2XXysxmDOukIsUu3LmDjdOuulSNNZ6oDIhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:41:7e:e1:a1:a6:27:05:8c:a6:4f:96:45:e7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Jul 1 10:01:32 2025 GMT
Not After : Jul 2 10:01:32 2025 GMT
Subject: CN=d7935f2850ae91618c8b083a58ec515ed978ea53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:ba:b2:b7:94:b5:c0:d2:1f:06:45:c0:16:
d4:76:65:1a:99:d0:69:1d:1b:a3:97:7a:59:89:47:
26:77:10:60:a2:d1:cd:91:ca:b3:09:ec:b7:8a:8a:
8c:2e:6b:94:15:ea:51:c5:fd:96:eb:1f:63:b5:27:
a3:2c:c7:38:85:14:d4:2f:96:ba:fe:c5:82:2e:50:
b7:5e:53:37:41:be:f2:2d:10:e9:ec:18:75:91:84:
e6:05:6c:e3:57:27:77:1c:fa:6c:a8:ec:6a:e3:87:
6a:f7:06:d3:e1:19:0a:27:f4:e9:70:92:1d:d0:13:
2c:f1:7f:ba:8a:93:22:ce:ac:27:01:41:aa:1d:1a:
a8:66:0c:9b:ec:5d:23:ec:01:db:65:95:8f:4d:5b:
bb:df:44:53:32:4d:b5:8e:9c:4a:f0:35:fb:5a:33:
d5:99:d8:a7:fe:0e:73:c0:06:2c:35:54:1a:54:06:
51:1e:69:52:c6:c1:45:30:28:35:40:79:cd:c7:4a:
29:4e:34:72:55:d7:60:48:b7:91:ee:1d:81:56:c2:
f0:b3:5b:48:61:af:8a:7d:1c:57:9b:3e:10:5b:69:
e4:41:a4:65:ad:c2:53:01:72:20:5c:1d:97:2f:5e:
d0:e0:19:47:e9:24:8c:13:a2:3e:fc:f0:be:fe:21:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:5F:28:50:AE:91:61:8C:8B:08:3A:58:EC:51:5E:D9:78:EA:53
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:95:45:91:88:eb:0d:1a:b7:cd:21:cc:8f:8b:96:c0:fc:59:
49:8a:0a:ad:12:5c:7f:f3:7e:06:7d:61:71:bb:05:12:d7:9d:
a2:ca:e3:7e:58:1c:52:a6:79:ce:73:5c:9f:7a:4a:cf:34:92:
8e:bf:c7:ab:21:98:a2:82:c6:3e:50:ac:0c:6d:bc:77:58:ee:
5c:9f:62:5b:8b:c3:9b:6d:69:fb:b8:5f:4e:0c:2e:11:ad:9d:
1d:5c:e9:b2:7c:7b:16:02:79:08:48:fd:71:94:f7:8f:71:d1:
f0:a2:b7:cc:c0:9c:b3:2f:e1:36:e9:88:4d:b1:5c:b8:02:a9:
f5:d4:6a:50:04:5f:10:65:bb:f1:e3:bc:9f:0e:29:81:7f:08:
7a:d8:d9:70:5e:29:2b:2d:62:1a:dc:4f:61:c6:77:87:4a:de:
03:20:6a:25:48:31:2e:92:4c:47:ee:c3:f3:c1:3e:91:7a:3a:
2b:b5:d9:16:c8:52:d2:74:28:07:f0:1c:d2:02:0b:64:43:b3:
10:5a:50:78:9a:d4:b4:b1:e6:87:ba:44:ed:6c:6f:91:1c:58:
b2:a8:a1:fe:0a:5a:37:e6:2a:58:4d:89:3a:04:2b:9c:2f:6d:
90:85:a5:6e:d7:8f:0b:fa:2c:1a:31:d8:d0:aa:8e:87:1d:cc:
14:c2:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:45:56 2025 by rpki-client