Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: h3njaERy67jIcdH8KSoFIP8XMI5qC5SqukUYNEtd0lQ=
Subject key identifier: 70:A9:95:64:1C:E6:92:7C:AB:01:37:2D:33:B4:59:AB:6F:29:16:A2
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 0198D54E1500672122E3CD5E99BA5379E85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 138F
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: P1CFGw2tRv+mspV/eLYNf7tJBYYui6G5yVPSUsVSyTc=)
2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:15:00:67:21:22:e3:cd:5e:99:ba:53:79:e8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=70a995641ce6927cab01372d33b459ab6f2916a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:74:22:49:f1:56:32:c1:32:43:a1:7a:33:
97:a4:af:e7:c4:07:64:a3:92:44:6b:99:a4:2b:d4:
d0:76:43:ae:6b:90:f1:25:2d:a7:2c:c2:87:88:e9:
a7:6a:77:40:15:0f:91:14:c3:8e:21:b5:48:d2:17:
be:e6:e1:44:b4:d4:56:7e:d6:7b:d4:98:3f:d5:d2:
9a:f3:c5:1e:8d:74:1d:fc:b2:f8:96:4c:6c:11:18:
2b:42:09:2b:23:0e:2b:17:1b:0d:e6:43:8d:f6:c9:
80:d3:35:65:74:bf:60:44:0b:67:4c:0e:1e:ff:b3:
95:0e:2d:56:09:35:31:e7:ab:57:d2:f9:4e:97:96:
e0:5b:7a:4f:18:e6:ad:b1:0e:e8:5d:2f:7c:3a:e0:
b2:01:d8:ea:59:07:1b:c0:5e:d8:33:da:a5:5d:65:
ba:fe:d9:da:06:c8:8b:89:4c:f1:24:2a:f7:90:57:
c5:08:a6:e7:2c:71:27:53:4d:f6:eb:b2:e9:d4:13:
c6:ae:93:6d:8e:54:3c:c1:25:f2:6a:eb:91:23:f2:
46:0f:d8:34:4f:68:6f:f6:7d:f3:0b:5f:7b:d9:da:
c8:d5:14:ed:cb:70:48:10:a9:9d:4e:6e:2f:64:5b:
19:64:98:9e:8a:53:6c:0e:14:50:9c:c9:ed:44:28:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:95:64:1C:E6:92:7C:AB:01:37:2D:33:B4:59:AB:6F:29:16:A2
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:6f:f1:32:36:7d:9d:15:5b:f6:38:72:63:57:c5:55:36:ed:
50:10:2e:eb:93:0b:ad:22:4e:07:e1:46:4e:2e:8a:14:a4:b1:
55:50:f4:f6:5f:04:4d:3c:51:d8:7c:36:97:83:cb:c5:f0:43:
4c:72:7d:5d:2a:2b:5c:38:8a:61:8d:7d:4e:5a:33:51:b2:04:
66:a8:4f:83:29:fb:28:db:38:34:e8:0b:75:4f:5b:a9:35:4b:
23:9e:47:3b:a2:18:2c:88:e1:71:7f:10:d3:b0:39:77:35:6e:
0f:54:41:d8:c0:d5:e8:fd:0f:34:8c:52:58:b0:79:c6:c9:fa:
74:ae:65:c5:32:52:1b:37:22:52:ec:11:7a:c9:f9:37:f5:55:
87:97:28:94:c0:c1:b4:2e:df:3d:fe:78:05:d4:68:25:45:32:
42:6a:75:2a:56:23:53:1e:df:f4:43:46:64:5f:73:46:0e:d3:
06:fe:45:6b:8a:b5:3f:b5:1e:f3:28:73:ed:cf:f4:8e:ba:2c:
dd:7e:0d:e8:16:94:f5:cc:49:c5:35:7c:30:e7:35:0a:1e:e6:
aa:dc:8d:75:04:ce:7c:00:19:4c:69:e4:e2:ca:4e:c9:ea:2b:
69:c6:c4:1a:ae:cf:ba:d3:1b:01:00:e3:e4:2f:e5:c8:7a:33:
52:4d:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:49 2025 by rpki-client