Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: AcVH9dTBt743sVG0cYg9hRGxZ9heakJXHSSEr4rorlM=
Subject key identifier: 77:C7:29:CF:9B:BB:3B:2C:D3:AC:B5:5D:DD:11:4D:83:22:36:54:2E
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019849D2C74C6C09C9B3A0636640A7B61457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 10B3
Signing time: Sun 27 Jul 2025 03:00:07 +0000
Manifest this update: Sun 27 Jul 2025 03:00:07 +0000
Manifest next update: Mon 28 Jul 2025 03:00:07 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: lzXNkYLePEmxcp0k5MN6VLOtbaCev7vhE2dO9t66DtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c7:4c:6c:09:c9:b3:a0:63:66:40:a7:b6:14:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Jul 27 03:00:07 2025 GMT
Not After : Jul 28 03:00:07 2025 GMT
Subject: CN=77c729cf9bbb3b2cd3acb55ddd114d832236542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:c2:fc:c1:a7:8e:2c:4b:d8:8d:77:b7:a3:
c6:0f:22:64:20:64:4e:c3:ac:60:ec:7b:71:af:cc:
54:d6:a5:61:8a:72:05:b1:d1:c4:d0:8d:60:ab:b7:
82:11:86:c7:1b:6b:1b:c1:6f:bf:dd:8c:66:f8:c8:
3d:0c:b4:3f:17:ae:45:ea:29:dd:df:76:f0:f9:1c:
4f:db:da:44:a1:e0:76:cb:df:76:cc:05:a4:ab:98:
4b:0a:00:3d:0d:8f:91:0e:42:77:81:7c:47:9c:ef:
70:6d:8c:5c:82:42:f6:b3:ba:56:7c:cf:85:d2:f5:
9f:cb:12:a9:fb:2b:a2:f8:c1:14:79:08:6b:36:81:
68:4d:6e:e5:77:b1:5f:1a:37:3d:29:6d:bf:64:cb:
f5:52:fd:aa:8d:40:81:9f:8b:a7:28:c2:87:db:f1:
71:98:79:41:55:1c:b2:6b:1c:c9:e0:32:41:97:3d:
3d:e1:35:dd:9b:31:59:3f:7a:86:a8:54:d3:18:3c:
6b:72:25:50:7a:99:0b:3b:9d:8e:06:21:b3:0c:60:
1d:3f:ec:f2:bd:72:d7:cd:c4:21:82:e6:c6:cc:ee:
20:07:92:60:98:83:c7:7f:e9:d0:ac:b0:8a:0c:e1:
72:70:b9:3d:18:42:d9:b3:56:9e:3c:0e:fd:8c:22:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:29:CF:9B:BB:3B:2C:D3:AC:B5:5D:DD:11:4D:83:22:36:54:2E
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:40:05:c2:12:3a:67:4c:1a:63:58:19:4a:b4:c3:3c:48:12:
1c:90:24:39:be:41:ab:04:62:5f:a5:34:31:43:e5:1d:6a:d2:
76:3c:3d:81:2b:4d:b8:9a:62:01:e2:2b:36:8d:7b:c1:2f:9c:
8d:4c:fb:5d:48:ca:23:4c:c4:ca:74:d9:78:d9:cc:3c:ae:ba:
ca:95:ce:cc:d5:ea:4b:8c:7a:a8:7a:70:fa:88:aa:1d:11:de:
cb:d4:74:a8:62:ca:f7:f1:05:31:fb:74:ee:76:90:95:ee:ba:
ad:65:a9:86:e3:13:a1:c7:59:57:39:53:7e:7a:f5:c6:4a:6e:
73:01:e3:4c:2c:49:fc:8e:12:90:31:bf:c4:ea:db:35:2e:d6:
a4:49:47:14:9c:eb:24:0d:d2:0b:f0:8f:3f:48:da:b4:1e:45:
1f:61:23:76:a4:31:1b:04:db:75:9f:aa:c7:40:fe:ed:4a:d7:
bd:bf:89:05:15:e3:1f:70:69:ad:77:71:ee:8e:48:d6:91:c9:
6f:8a:e4:28:9f:20:35:16:f4:44:f1:1e:13:20:6b:c5:0f:16:
64:7c:cf:46:bc:33:66:0c:16:70:85:49:0f:17:73:91:cb:ca:
6a:10:dd:45:51:a5:6c:2f:8e:ef:a5:17:c7:23:95:c3:a6:02:
12:80:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:33 2025 by rpki-client