Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: npPnhwgUJ4BiC2agkdVbCziwJ2XfEqBM+3B+GeCQsI0=
Subject key identifier: 37:85:8D:D8:19:53:81:95:A4:65:86:A4:BA:F9:7A:DC:C4:7C:2B:17
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 0198D473913DAC6AF634C9242A0CCBEA0ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 13C7
Signing time: Sat 23 Aug 2025 01:03:20 +0000
Manifest this update: Sat 23 Aug 2025 01:03:20 +0000
Manifest next update: Sun 24 Aug 2025 01:03:20 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: Mg0y8DouST5GdvDY5PV/amWgBMhBIlYPOcNXT8Tx9z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:91:3d:ac:6a:f6:34:c9:24:2a:0c:cb:ea:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Aug 23 01:03:20 2025 GMT
Not After : Aug 24 01:03:20 2025 GMT
Subject: CN=37858dd819538195a46586a4baf97adcc47c2b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:a2:0b:ae:72:dd:d4:1b:3b:96:94:8a:75:
f3:4b:c8:34:61:45:3e:cc:12:0b:08:bd:58:e8:41:
3d:cd:43:f0:d8:8f:0f:65:88:e1:a1:49:b0:b5:43:
27:df:60:23:59:37:0e:57:e7:fa:20:c7:d2:65:d1:
b3:af:2e:1e:c9:78:62:e9:af:d1:e1:f8:70:9c:e2:
2a:57:58:66:4b:a7:04:1d:bc:65:46:b7:ba:83:c2:
9f:e8:36:60:47:35:1a:37:71:db:55:69:56:99:7e:
c9:46:6c:cf:4e:c0:8a:3f:b3:36:66:84:e5:85:31:
a0:66:1b:02:15:68:77:56:67:e4:06:a6:7f:f3:4d:
55:1e:1c:84:59:40:21:e1:b7:cf:4d:ba:56:30:2c:
10:ef:1c:ce:77:a6:e7:7d:94:a2:af:67:10:06:64:
93:bb:f3:a9:29:97:4e:c4:b2:3b:01:d2:b0:61:de:
d5:cd:f0:4b:8b:20:24:60:fd:85:dc:e8:9a:f7:96:
e4:d1:9f:ef:44:31:6c:c0:66:c7:8b:22:8c:33:dc:
10:0e:eb:5c:cc:22:64:ac:96:73:6a:ce:b4:63:64:
90:25:e3:a7:e8:bc:f8:32:7e:32:4d:cd:68:a2:18:
b7:f3:bd:71:58:da:00:2f:12:bf:ec:0a:35:c1:21:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:8D:D8:19:53:81:95:A4:65:86:A4:BA:F9:7A:DC:C4:7C:2B:17
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ad:e0:37:41:6e:09:b6:e8:97:94:f2:27:8b:7b:ab:8f:b5:
36:b7:12:97:de:d8:05:13:c8:aa:a0:13:de:71:12:72:38:32:
c8:57:11:df:73:c0:8a:d3:d5:f4:97:1b:54:f3:44:86:2f:bb:
d8:d3:56:9a:85:c9:8a:96:ee:75:30:5d:5e:49:d0:94:53:2b:
78:b9:3a:45:a2:fe:43:4f:3f:95:91:8c:44:f0:01:e6:07:82:
31:f4:74:7f:82:27:e9:90:94:7e:f6:d1:95:ab:18:e0:b2:03:
e8:b9:79:8c:64:28:e3:70:61:b9:0c:37:46:54:08:de:8e:9c:
8c:00:5d:93:3b:95:9d:39:94:9d:1a:f4:7e:1b:53:dc:c4:6b:
67:2d:9e:6e:7f:f9:55:f5:e9:26:dc:50:c7:89:8b:96:9f:db:
52:b4:36:d2:e7:f7:38:99:4c:f4:cc:82:7d:ff:3b:50:db:d8:
c2:bc:f5:de:aa:ca:8d:74:98:6a:6e:97:7d:33:d0:2b:6c:ee:
d4:90:5f:54:fa:ee:c1:16:f6:07:33:db:cc:6f:4f:23:bd:10:
14:6e:13:a7:11:45:c6:da:b7:fe:00:0f:32:73:6a:52:e8:af:
fc:57:de:6c:ce:2e:06:3b:50:a1:2f:46:ee:10:66:41:b8:c0:
52:96:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:30 2025 by rpki-client