Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: /BaZV8r8HLH6xfwheiLzbKb/f2KLV0vMCRntcPxea/8=
Subject key identifier: D6:EE:0E:A8:B1:E0:48:64:EB:AC:E5:14:98:02:0E:A4:D2:46:6C:0A
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 0198D660C8FBDF40C54D40243D9457304B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 09A8
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: /XZVpM2T3/iI3ITEWOkKibVsYF15FVkPbk3Wjj3Fmoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c8:fb:df:40:c5:4d:40:24:3d:94:57:30:4b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=d6ee0ea8b1e04864ebace51498020ea4d2466c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:b9:81:ad:3d:aa:b2:60:8e:83:64:57:13:
7c:73:b2:1d:e1:ef:6d:47:08:dc:41:c3:da:e1:e5:
a1:b6:63:d7:88:86:a6:20:b8:91:f3:a9:38:ec:0c:
0f:57:de:17:2d:20:82:08:49:e5:27:64:da:4f:c2:
da:21:6a:a7:c9:3a:ae:13:b5:20:64:3d:e4:b8:80:
94:7c:09:db:1a:d0:5c:59:2b:50:d8:0d:3a:a1:39:
c6:35:bb:63:2c:c3:48:4e:17:db:ea:39:b0:5f:4f:
f2:08:49:60:49:d2:5d:20:96:ed:84:e8:2b:67:ed:
aa:57:8e:aa:31:97:f5:23:a9:18:18:d7:f1:66:b2:
43:a8:cf:82:9d:e6:d3:fc:05:4f:83:c8:c5:3a:35:
15:90:bd:70:bc:34:e7:b9:55:47:1c:99:72:83:6b:
68:5f:b8:82:76:64:df:32:c6:f9:e9:c1:cd:85:a4:
61:6e:97:d8:00:d5:6f:7d:83:82:34:96:01:ad:bd:
52:d9:3d:ba:5e:95:f8:a6:25:93:b4:83:3b:a8:47:
64:ea:10:dc:93:31:25:2b:d3:91:da:75:4e:a4:2b:
66:ca:12:96:37:d7:10:16:46:be:61:f0:d6:33:b8:
c9:23:dc:10:16:69:b9:f9:5d:ae:5c:4a:31:d8:c9:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:0E:A8:B1:E0:48:64:EB:AC:E5:14:98:02:0E:A4:D2:46:6C:0A
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:7a:cc:29:ec:0a:31:51:ab:2f:5b:95:2d:96:28:fd:59:
ad:19:04:8b:73:8e:3d:04:c2:55:01:8b:06:3e:ac:dc:3d:60:
3c:ff:26:dc:df:79:b3:13:cd:f1:14:44:f8:dd:d3:e9:da:ef:
6d:f6:aa:93:76:09:52:55:51:80:c8:1c:f3:40:b2:10:ec:1d:
3a:09:d0:22:48:e1:9e:c0:97:2b:58:a6:78:c5:22:ba:bc:91:
bb:fd:07:9e:9c:da:96:8f:a3:ff:91:54:b6:44:d5:3d:11:d4:
33:6d:c8:fa:b6:a3:27:e2:de:54:0e:e0:37:a5:83:96:c4:06:
95:e0:24:46:f4:04:1d:53:67:85:1d:76:78:9e:9e:2f:f1:65:
84:cc:d0:70:82:b8:6d:b9:4b:8a:d6:72:52:52:b5:06:68:89:
9b:b8:46:e9:2c:fb:6b:b6:67:9a:3b:fb:6e:b2:83:39:4b:af:
34:a6:1f:7b:1f:71:01:3a:8f:ce:31:8a:e8:78:91:01:08:80:
cc:a3:61:de:2a:fa:7f:ab:7c:5f:3f:ed:ba:3c:20:aa:c0:fb:
02:e8:4c:0b:b6:1e:16:b4:92:82:5b:6f:43:fa:3d:fe:6c:9b:
df:28:59:b6:3d:4b:e6:2f:03:7d:c2:81:1a:89:d4:fc:58:11:
ec:ef:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:10 2025 by rpki-client