Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
File: JfgKOI5PDiZBTOq-q036hBkdgUA.mft (raw, json)
Hash identifier: UIRooIh40itPwFyAbjc6ZiySDksC1ZVXmOY7yx9m920=
Subject key identifier: 0F:DC:06:AF:42:A5:12:23:D8:8C:1A:B5:27:6C:EC:96:1B:10:A1:D5
Authority key identifier: 25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
Certificate issuer: /CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Certificate serial: 0198D4E0BE8675C7B3522BAC9207CC6FAE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
Manifest number: 1551
Signing time: Sat 23 Aug 2025 03:02:35 +0000
Manifest this update: Sat 23 Aug 2025 03:02:35 +0000
Manifest next update: Sun 24 Aug 2025 03:02:35 +0000
Files and hashes: 1: JfgKOI5PDiZBTOq-q036hBkdgUA.crl (hash: sHlrFHdMa+b87IytELZ+VpRTjvFGiCvxddxRRiT+4to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:be:86:75:c7:b3:52:2b:ac:92:07:cc:6f:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Validity
Not Before: Aug 23 03:02:35 2025 GMT
Not After : Aug 24 03:02:35 2025 GMT
Subject: CN=0fdc06af42a51223d88c1ab5276cec961b10a1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:a8:fa:5a:86:4c:eb:08:40:d1:ee:05:86:
5c:e0:15:27:b4:e9:85:46:17:37:6b:1f:4c:c9:22:
10:ac:dc:a5:af:1a:ef:2b:ca:9c:85:21:51:b4:23:
2c:07:10:cf:3e:1d:e6:26:3a:3d:22:16:8d:52:a7:
b2:9d:81:66:92:2f:0d:85:f4:57:73:83:6b:b7:7e:
9a:c5:ad:25:60:81:2b:c8:ad:f1:82:1e:a0:29:93:
21:16:75:fc:cb:ad:7a:04:24:c5:94:fa:7d:53:bc:
7a:be:23:a5:9f:2c:0b:3a:8c:28:e4:ac:27:b6:09:
d7:e7:9b:81:5b:5d:c8:14:58:d9:93:fa:24:48:6b:
6b:cb:29:58:60:45:d9:c0:11:c9:67:95:55:20:03:
c1:78:c0:f7:6d:39:f8:f1:e7:45:79:9e:d0:9e:51:
61:87:5c:54:fc:2c:fc:85:5e:68:ff:4c:1a:9c:eb:
72:72:2a:07:e7:96:0b:9e:79:43:67:3d:e2:80:50:
b0:80:0f:da:7c:44:24:54:fe:1c:f8:0d:45:f4:2c:
b5:9a:c1:39:fd:9a:e3:70:e5:ae:f0:67:b0:cd:cb:
eb:23:fd:8f:ab:23:90:96:a0:8b:a2:21:ed:f3:1e:
b8:47:1d:c1:00:00:bd:7a:95:2f:bc:68:3f:22:d7:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:06:AF:42:A5:12:23:D8:8C:1A:B5:27:6C:EC:96:1B:10:A1:D5
X509v3 Authority Key Identifier:
keyid:25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:94:22:07:bc:5a:e4:05:a0:4a:d6:99:df:be:b1:23:b2:e0:
8a:23:8d:e0:38:4e:f0:62:bd:8c:99:9e:5d:7a:b1:d2:93:36:
39:3b:9b:10:df:69:90:19:23:b2:52:5a:6d:89:d6:8d:ee:dd:
cc:d6:8a:a0:06:57:fc:bb:05:5a:0b:3f:1e:65:69:b9:c7:a6:
3f:7b:ee:0c:73:c6:7f:f3:ac:ce:c4:62:54:aa:05:54:16:d1:
34:29:21:05:38:c2:ee:15:44:15:0f:a3:68:0e:89:44:1b:9b:
cc:0b:14:c6:e0:b9:3f:71:73:55:06:f9:d4:2a:f8:58:8c:b4:
47:a1:bd:c8:6d:6c:44:4d:10:74:06:5c:8e:de:26:6b:49:58:
89:94:20:0f:1f:6b:59:15:c1:b5:d1:f1:98:5a:8f:11:06:c0:
4e:5e:98:08:fb:02:e1:60:d7:65:7f:f4:fd:a2:a7:cb:3b:47:
90:ce:99:7f:07:fb:0f:f0:5d:73:83:0f:77:24:95:b1:d1:aa:
9a:c7:ea:10:dc:ed:86:7e:4b:f5:53:67:f9:e2:2f:60:22:5d:
e8:8c:8c:7c:48:cf:7b:96:fb:f8:6c:37:fe:1a:35:5d:20:5a:
fa:c1:71:04:92:7b:da:ce:8e:cd:62:99:54:5f:56:74:26:aa:
78:a0:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:29 2025 by rpki-client