Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: bNRRtNHrUneQzLS+FSeBXijHQ7QPOt+b3UwQlQDDCsU=
Subject key identifier: E5:46:F6:2B:E2:20:B8:37:25:88:62:67:63:67:FC:F8:92:4D:A2:98
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 0198D73AFC55ADE678F6B88F30FC24151E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 07B4
Signing time: Sat 23 Aug 2025 14:00:23 +0000
Manifest this update: Sat 23 Aug 2025 14:00:23 +0000
Manifest next update: Sun 24 Aug 2025 14:00:23 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: /+O70iKjJwjk10Nq2UWt21BdtSjMr/fl1bZJAqKeT+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:fc:55:ad:e6:78:f6:b8:8f:30:fc:24:15:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Aug 23 14:00:23 2025 GMT
Not After : Aug 24 14:00:23 2025 GMT
Subject: CN=e546f62be220b837258862676367fcf8924da298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:42:07:ac:b1:ea:c8:c6:5c:a5:c9:e0:af:
bc:d4:de:e1:a2:59:07:4f:0c:ee:5d:1a:8b:b3:e4:
04:75:35:b1:be:69:82:c1:15:7b:5d:08:84:63:cf:
5d:09:02:90:3a:81:ac:9e:8e:66:a0:44:49:19:98:
77:29:7a:90:ec:d6:57:38:03:cc:d6:a8:a3:77:d1:
4f:0a:4a:87:15:2f:17:05:9b:d9:55:e2:19:5b:be:
9e:67:69:c6:cf:22:81:31:06:68:2b:95:2e:66:aa:
1f:35:3d:0b:90:bb:8b:d6:93:c5:9f:90:7b:79:77:
90:83:e0:a4:7d:aa:e1:3e:b7:50:a9:c4:f1:d8:cc:
c8:4d:19:7c:bb:d0:51:f9:54:a4:f8:12:ef:d6:4c:
78:86:aa:2b:3a:fd:9f:35:f5:68:a5:22:56:44:6d:
70:a9:49:f6:b3:86:0e:66:aa:32:78:9a:47:ab:c2:
bb:33:5a:e6:e0:f0:2c:92:91:cf:bc:50:a5:3a:fa:
cf:47:49:b3:8f:bd:f0:f0:88:03:da:ed:be:b1:55:
d3:af:09:d1:e6:2f:d7:2a:62:93:de:15:f6:25:a8:
ec:47:fc:78:29:1f:12:35:87:6a:b7:93:c4:30:65:
24:9a:e5:6b:67:4d:0e:9e:d4:27:e5:2c:c7:d5:c0:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:F6:2B:E2:20:B8:37:25:88:62:67:63:67:FC:F8:92:4D:A2:98
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:24:b4:48:da:95:f4:2f:76:07:cc:d5:13:5f:b9:2e:ba:d8:
fd:aa:da:0f:38:72:d0:03:75:16:8b:c9:f3:82:f1:0c:01:b8:
ca:8c:60:e0:a4:39:4a:b1:55:27:de:6c:ad:0f:a9:03:60:f2:
d6:3c:60:cc:ac:3d:61:bf:36:7b:3a:87:27:be:77:cb:41:86:
ec:df:f0:4c:c8:c1:1f:70:6d:a2:dd:ce:53:73:af:29:92:97:
a2:82:50:03:ab:87:0d:87:a0:f8:46:39:3e:cb:ac:7e:c8:d5:
1c:31:4a:44:1b:ea:8e:32:3a:95:7d:96:f5:e5:bd:37:35:26:
e3:40:6f:94:e0:49:ff:0f:a0:1a:b3:63:ec:c7:e2:88:18:70:
07:45:48:e0:f5:6d:bd:8f:0f:cc:0c:47:21:0b:c8:ee:09:8c:
1f:1a:32:e6:bc:7d:24:b8:6d:cc:58:32:8f:5e:83:d5:78:e0:
f6:43:51:72:db:76:f8:12:7b:d7:ae:ed:6c:30:78:af:5c:9a:
12:ac:c6:1d:97:89:fd:07:b7:62:6f:c3:30:c4:62:df:28:90:
cf:43:87:34:e5:09:5c:35:64:6a:2c:e6:7f:87:65:38:d0:b6:
7d:f7:a9:cc:54:95:6d:e8:33:84:aa:53:a0:01:67:2e:43:7b:
c0:eb:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:36 2025 by rpki-client