Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
File: JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft (raw, json)
Hash identifier: YGjRkAXEHJxLzcOUGV8qsuWWcOyKDpYblkq1wkpqW5I=
Subject key identifier: 4D:8D:DB:00:E7:F6:E7:2A:37:D4:61:89:2A:17:F4:25:CE:96:30:83
Authority key identifier: 25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
Certificate issuer: /CN=25fa5fc46274edcde5cdceb0a948db120e339219
Certificate serial: 0198D51572A3BDD165A212F42389026C09F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
Manifest number: 011E
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl (hash: sd84FAs4UgAAsTeJEJXGGhn2LOM971IlsovJrL/BvDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:72:a3:bd:d1:65:a2:12:f4:23:89:02:6c:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fa5fc46274edcde5cdceb0a948db120e339219
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=4d8ddb00e7f6e72a37d461892a17f425ce963083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:9e:9d:2d:e4:ab:e1:25:e8:d2:de:0b:e6:
00:ec:48:a7:cb:01:9b:39:3d:5e:e5:2c:a6:6b:3b:
61:3a:38:87:20:3d:17:f7:f4:51:18:8a:69:ae:ad:
0b:59:af:74:f3:35:ff:96:27:84:90:95:fd:1d:24:
23:e8:6e:2c:18:f6:49:ca:f0:1e:7e:2a:77:ad:44:
e0:c9:77:00:81:1b:ea:0a:d2:76:67:40:08:dc:48:
8b:b2:d1:56:94:f9:c3:ea:67:bc:64:ce:ae:4c:8a:
a8:81:75:f9:ba:29:26:41:db:82:ed:7c:c4:b7:d1:
69:72:2e:72:be:a3:3e:8f:4b:79:9c:ad:63:69:ad:
b1:af:0f:bf:53:dd:32:99:78:ec:b5:4d:04:18:70:
a1:6d:94:b2:6e:53:44:33:df:a5:ca:ee:2a:96:b0:
68:66:44:4d:4b:fd:36:63:54:93:ab:28:9c:a8:5c:
24:d5:1f:97:ed:30:43:d8:89:ae:db:14:ea:11:67:
05:af:27:fd:7f:fa:22:31:01:50:77:99:57:06:e3:
60:72:99:a3:6f:20:31:34:a7:f9:97:23:b9:81:0f:
75:7e:d3:bc:1b:dd:e7:a2:d2:b2:82:e6:82:70:28:
01:9d:73:b2:5c:72:fc:8f:ba:f0:3d:55:fe:47:4c:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:DB:00:E7:F6:E7:2A:37:D4:61:89:2A:17:F4:25:CE:96:30:83
X509v3 Authority Key Identifier:
keyid:25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a0:6e:77:ca:65:50:f5:d1:27:d2:a3:6e:67:e6:bd:45:51:
c7:29:ff:de:37:ae:68:03:4d:53:4e:1c:13:5d:b3:d6:b1:d5:
30:46:79:ec:2d:11:a6:10:39:a5:95:dd:b2:d9:8f:c4:24:87:
4d:91:f3:8f:9a:9a:ea:97:e0:45:05:4d:1a:29:7d:3d:c8:7d:
4d:36:31:c6:ba:f9:7b:7f:77:4d:df:87:81:8d:9d:1e:3a:68:
58:6b:29:90:42:cd:d0:2f:4c:35:37:f7:dc:56:35:6d:9e:84:
5d:0b:f2:eb:71:b9:13:7f:37:a6:26:7f:24:e4:85:99:05:b4:
bd:ca:77:98:da:3a:54:28:5a:93:12:3b:b9:33:2d:f7:14:4d:
69:85:a5:a6:dc:e2:93:f4:57:95:0b:38:25:3d:7f:4b:bb:04:
dc:1a:eb:09:4c:83:62:00:c9:db:82:be:af:7d:fe:59:a7:a0:
c0:e1:cd:2c:85:c0:b1:a4:19:fb:6f:cb:4a:62:bc:ac:2f:72:
e1:60:be:f0:9e:f1:bb:d1:29:6a:67:6f:d2:15:8d:88:26:ac:
af:26:a9:2e:03:38:30:47:b3:93:61:84:dd:33:df:4e:4a:54:
1e:e9:75:f1:db:e1:94:62:f9:8e:9e:68:54:8f:c8:ca:80:ba:
12:f8:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:52 2025 by rpki-client