Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: h0W4MKHn/JIlxJIP7JswZYerNyzhuvxnyXp444XCdOA=
Subject key identifier: D9:87:58:C3:88:77:DE:E8:70:EA:CB:40:49:66:91:6E:4F:A9:9E:2D
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 0198D6CD9B8F30AB58DDBA2A148BB94BA7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0C36
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: dy7PJr6FvGGaK3daMvlEi+lqJmkS73eCq/4mGbHwqwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:9b:8f:30:ab:58:dd:ba:2a:14:8b:b9:4b:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=d98758c38877dee870eacb404966916e4fa99e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:53:d4:3b:36:fc:da:54:88:0c:c2:00:4e:32:
58:dc:e7:9f:83:a5:89:18:46:b8:ad:3c:88:92:40:
bc:3f:d7:57:1c:1f:4e:0a:b7:21:8b:c3:e4:15:96:
96:45:9b:94:b4:0a:80:b2:16:4d:9a:94:3b:77:db:
93:e6:87:0d:98:fb:a8:23:5c:ca:4e:ee:59:3c:33:
a0:1a:39:14:f5:24:33:c5:7c:fd:12:87:3b:82:66:
c8:98:fa:67:b5:1d:74:f5:b1:9d:f8:54:d3:48:a5:
cb:89:ed:2d:bb:0d:59:a0:1f:4e:79:f5:17:83:3e:
cc:ae:19:f9:d8:ec:81:ae:a6:5b:2b:ed:d2:66:30:
0b:cb:2d:6e:34:7b:43:fb:9b:3e:c7:1d:c2:85:6a:
00:2e:df:cc:ed:b7:cd:20:c8:cd:e9:22:ee:06:73:
97:7e:f2:13:10:f1:54:a0:47:33:0e:8b:34:aa:d9:
85:99:14:c4:70:2d:5e:26:a8:36:94:54:3c:59:47:
eb:3e:fc:a2:f7:8c:8b:67:ad:b7:d0:02:4f:f3:09:
2a:d1:00:52:0e:fb:40:96:2c:a9:65:2c:48:12:85:
6b:52:5d:67:06:60:46:3b:2a:2c:bb:64:63:3e:d6:
3f:e3:4d:8d:f1:44:81:5e:b7:8a:2c:e4:78:91:28:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:58:C3:88:77:DE:E8:70:EA:CB:40:49:66:91:6E:4F:A9:9E:2D
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:6a:04:8b:95:8c:3a:e7:e0:a4:e2:de:d3:c5:29:a1:94:
3b:65:fa:63:8d:be:cb:db:1c:20:5a:15:9e:77:b1:62:ba:c3:
83:1d:e0:5c:75:32:24:07:7f:09:f5:14:9d:e1:c1:27:d1:4f:
bf:5e:7f:dd:ff:85:fb:68:56:49:a4:1e:20:fc:d0:e5:b0:a7:
8f:89:92:24:c6:74:c8:fb:d3:cc:96:0a:76:cb:02:e0:cc:30:
15:13:70:85:b3:36:5c:75:b1:a1:49:47:97:d2:bc:99:6d:fc:
8e:6a:4d:7f:22:6a:a8:e7:69:dd:d1:0f:d3:c1:b2:e4:a0:40:
9e:54:cf:5a:33:15:7d:52:ae:3f:c4:26:f5:74:19:8d:1a:69:
e2:d6:e9:39:60:a8:ea:63:b4:7c:70:44:f7:e4:9f:64:bb:74:
30:cc:31:95:4c:c2:93:9e:51:bb:ab:80:27:b0:a0:c7:3a:0d:
aa:f9:92:f8:9a:bb:9d:d3:8d:6c:08:69:f1:9e:a2:57:9b:68:
c7:38:9b:bb:25:c1:0a:0c:c7:3c:be:6d:50:b5:a8:e4:a5:99:
d4:bb:7e:c4:34:60:30:96:db:0c:ce:92:ec:07:1e:1c:f7:bc:
57:17:c3:ee:12:e1:5d:60:64:34:d0:2f:71:2c:28:61:45:95:
a3:85:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:54 2025 by rpki-client