Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
File: JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft (raw, json)
Hash identifier: nFEswTroUd6/GSau5ROOKeiqmMYo24seJCc+zkSZ/SQ=
Subject key identifier: 03:AE:C5:9E:6F:48:1E:5B:BA:13:92:F3:01:46:20:C6:11:B5:3F:3C
Authority key identifier: 26:22:6E:14:1E:81:13:74:21:97:1A:0C:74:5D:60:5A:AC:8A:A6:C8
Certificate issuer: /CN=26226e141e81137421971a0c745d605aac8aa6c8
Certificate serial: 0198D5F1BED4A1AD22657100DF9B9E0C02E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
Manifest number: 3F
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl (hash: 8N036Ywx0RMHfkwmnjR5JkoYxLDsPwv1VR+sPSa9Sg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:be:d4:a1:ad:22:65:71:00:df:9b:9e:0c:02:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26226e141e81137421971a0c745d605aac8aa6c8
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=03aec59e6f481e5bba1392f3014620c611b53f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:16:90:c3:82:de:c0:0e:00:ea:55:c0:c4:
48:46:cb:62:07:f2:b4:41:49:54:de:4f:18:6b:47:
5f:57:5a:34:bc:0c:6f:0a:ce:19:a3:e5:89:dd:41:
a9:30:9f:9d:53:37:9f:20:fa:02:5e:e7:28:64:86:
f6:47:b5:ce:a6:eb:49:20:9e:66:7c:55:af:59:3e:
e0:89:53:c5:3e:3a:a1:66:d9:2f:5e:68:41:9c:a6:
33:02:1c:4b:7b:e5:d3:d2:6c:6b:1e:96:f0:64:2b:
f4:f9:25:50:c1:53:c4:11:b0:b2:1a:8b:6c:32:31:
e1:c8:a1:30:eb:4a:30:b7:24:6f:4f:b8:63:1b:54:
aa:6c:4f:cb:3f:29:9a:cb:78:ec:b7:9f:84:c4:14:
db:6c:67:04:26:d0:8a:87:b1:99:21:bf:c6:6e:19:
88:7d:7b:36:90:62:5b:7a:8d:36:96:8e:91:61:79:
fe:a9:22:d8:eb:da:d6:ce:ad:46:3e:a4:57:ee:9b:
02:86:67:64:82:85:f2:08:cd:c7:c7:9b:80:57:1d:
9e:e7:7d:34:4d:b2:9d:3f:ea:66:32:ab:42:f4:24:
9d:b9:af:b1:ed:40:1d:84:4d:8a:9b:87:0d:97:15:
ee:1b:2f:a4:47:b2:c4:d0:47:3b:07:88:41:f1:93:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:C5:9E:6F:48:1E:5B:BA:13:92:F3:01:46:20:C6:11:B5:3F:3C
X509v3 Authority Key Identifier:
keyid:26:22:6E:14:1E:81:13:74:21:97:1A:0C:74:5D:60:5A:AC:8A:A6:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:97:66:5c:fc:c7:58:50:6d:82:dc:40:f5:ca:1e:fe:e7:
39:f1:e3:19:a8:2d:94:fc:ca:46:4a:5b:44:5f:2c:37:2d:69:
59:99:db:e3:6c:d5:29:56:c8:e6:5a:c5:b9:8f:5e:8e:3b:7a:
f5:6c:0b:8f:37:c5:ee:79:4b:9a:15:cb:4e:c4:12:b5:8f:06:
72:81:58:8c:85:b8:6e:66:38:a4:b8:22:cf:47:e1:60:2f:8b:
cc:c3:70:6c:e0:b4:b2:d3:58:0a:a4:24:2e:4b:09:59:6c:bf:
00:ef:9b:ef:46:9c:8f:60:29:76:33:cb:47:6c:d3:0a:4b:53:
7a:ca:bf:8a:e1:e4:8c:bd:1e:c4:e5:e7:cf:6b:8b:1e:ea:9b:
9e:df:ea:c5:0f:1a:c6:fe:b6:1a:d3:59:e5:42:e8:b3:b5:9f:
22:a0:10:ce:e3:a6:43:52:a3:d7:12:b9:99:93:78:c6:41:e1:
f5:d6:77:3b:ca:da:66:b6:88:95:54:e7:c8:4d:63:82:72:21:
f8:63:0a:d7:05:de:9e:ba:d4:27:02:ef:38:e3:6f:60:b6:0a:
2e:27:c0:c2:a4:70:0c:78:90:1e:10:eb:de:fb:de:0d:fd:b3:
7d:3a:6c:0b:95:6e:b0:8a:85:a6:56:36:f8:2f:b0:8f:58:3d:
ae:81:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:56 2025 by rpki-client