Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: WIDKVR7J5m0kXaZpWgtuXmg++UckuCWrdMWXJqbvYPU=
Subject key identifier: BE:85:5E:63:BE:A0:56:82:F7:73:AD:C5:41:DA:C0:53:EC:11:53:39
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 0197B77C8A585206EE162657009C8C59C839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 071F
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: 9AHPxzevoukcR58Ggh0tCwxSYVc6OkgmfQGmKXE5RWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8a:58:52:06:ee:16:26:57:00:9c:8c:59:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=be855e63bea05682f773adc541dac053ec115339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:f9:91:a8:cb:2c:9b:cc:24:38:22:f0:41:
8f:0c:1b:56:e4:23:8b:18:69:1c:d6:84:42:a1:74:
e0:ad:fa:96:84:d5:61:f3:7a:bb:8b:ca:5a:77:4a:
88:81:ca:bf:f9:cb:bd:d2:91:36:f3:b8:dd:b5:64:
26:09:04:94:86:5b:1e:a7:b0:87:26:42:11:80:2b:
c1:e4:8f:6e:f0:5a:ea:15:a9:61:93:ef:75:fc:2f:
4f:28:92:03:cf:21:11:a3:6a:f2:a3:d0:8e:dd:d1:
2f:7a:4e:8f:f3:75:17:0e:0b:61:23:80:23:fa:9d:
0c:e2:f4:f5:bc:88:16:f4:ac:1a:f6:fa:31:c2:d7:
3b:5e:93:46:c9:a5:a4:71:46:5e:ea:db:34:7c:7d:
02:8e:b8:05:8d:db:ff:cd:84:93:c9:cd:59:ed:83:
5d:cc:e8:17:b5:93:25:f0:6e:b4:aa:4b:2b:50:12:
0b:a8:a3:21:21:86:d2:60:0e:2a:96:e0:11:2f:75:
5e:b1:f6:40:2c:6c:64:f1:c5:c3:a2:8d:21:ac:ac:
ba:f8:c3:b2:22:cd:ac:56:fa:b9:36:21:00:ce:82:
90:97:aa:d1:a2:3f:20:07:99:69:13:da:8b:87:16:
a5:68:c8:ee:ad:c8:14:cd:b7:33:5c:21:d9:69:45:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:5E:63:BE:A0:56:82:F7:73:AD:C5:41:DA:C0:53:EC:11:53:39
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bc:b4:02:e1:83:88:f7:47:d6:cd:c9:58:4b:70:c3:c8:1b:
87:21:4a:a2:37:6e:da:c7:09:f4:06:e1:12:a3:76:c9:cf:19:
09:54:f5:81:09:a0:42:53:85:41:8b:da:53:06:24:cf:22:a1:
b1:1e:ae:ee:d8:50:f8:e2:a9:22:44:9f:bd:1d:cd:d5:b0:c7:
dc:f4:59:f0:6b:cc:8f:46:bd:03:c8:35:62:b2:67:88:29:0d:
cd:fa:ac:8a:92:76:54:cd:eb:21:63:79:27:77:5f:1b:cd:b8:
68:7e:03:4b:5b:22:6f:9e:2e:6c:a7:d5:94:c1:7f:42:c7:ed:
01:e8:1f:42:39:ce:03:db:71:f2:7c:0d:b3:2c:31:cc:f3:b9:
ce:40:e4:90:8c:4f:4f:f1:73:2a:c2:7b:ab:51:98:85:34:df:
db:aa:d7:c1:8a:74:a2:a2:6c:0f:81:16:7e:54:a5:d0:c9:28:
91:04:fe:0b:10:8a:7c:f3:f7:d9:60:02:8c:ec:65:c5:b0:20:
6d:5c:11:4c:bb:85:af:35:c2:e2:0a:90:86:bd:6e:0f:58:b9:
92:17:65:81:ab:60:6c:5c:47:2d:3a:2c:83:fd:3d:55:8d:7f:
68:2c:c0:33:ba:01:94:9b:19:57:9d:63:2b:2c:f6:96:ed:48:
67:0a:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:35 2025 by rpki-client