Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: zswgMTjo1INmaR0fEYgTPHcXqTfi46b4Tn5MUh+pIxg=
Subject key identifier: CB:AB:98:34:FB:5C:1A:6D:E7:34:59:FF:1A:89:AA:DF:F5:75:A8:F9
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 01984A09DAE4C863A1EF3BE4D0E462BC00D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0DAC
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: P5kgde/j/qenY+qR2UJRqILNONo9dBlJmJyftK6Fvgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:da:e4:c8:63:a1:ef:3b:e4:d0:e4:62:bc:00:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=cbab9834fb5c1a6de73459ff1a89aadff575a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:83:04:a0:8f:3d:6e:81:a6:5b:51:54:26:
be:c6:ab:51:da:24:7f:6e:4e:9d:7d:7d:96:fe:df:
e5:f4:fe:9f:a1:37:6c:b6:d8:b2:d9:38:5b:0a:5b:
7e:69:2a:69:9b:8c:0e:1d:23:26:ed:9f:1e:13:6c:
fd:df:73:c7:91:9e:34:3c:20:45:a3:76:a0:5f:e9:
c3:9f:49:97:8b:9e:cf:64:4c:71:28:0e:8c:a5:3e:
3b:01:f1:37:86:b1:0b:ff:52:6f:ee:2b:40:85:44:
00:f7:cb:82:36:b9:2e:c9:42:89:5c:23:4f:1f:52:
78:5d:43:9b:3f:08:ab:b5:85:3c:fc:a8:28:67:8d:
1f:1b:eb:f7:a0:1c:39:6d:2b:f4:a7:eb:71:29:fc:
43:ed:22:8d:e7:07:44:d3:f8:b1:57:bc:d5:5a:d9:
94:63:46:30:33:95:aa:06:4b:92:29:d0:a4:79:b5:
83:0a:af:72:12:bf:0f:db:c2:b2:67:11:78:92:de:
9d:ee:7a:b5:17:bc:72:aa:3a:cd:ec:e7:4d:71:83:
09:13:0a:3a:05:50:5b:21:0e:40:06:df:12:b4:c2:
ee:fe:de:2f:59:ca:ee:e5:d0:88:cc:aa:f3:8b:02:
d2:96:72:a0:ec:53:30:ce:86:70:ae:20:09:c4:76:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:98:34:FB:5C:1A:6D:E7:34:59:FF:1A:89:AA:DF:F5:75:A8:F9
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:97:a4:37:ee:8d:a3:15:3e:a5:16:17:3b:fa:cb:29:78:
25:1f:ab:4c:bb:1d:b2:50:8a:c4:b0:b2:b9:ba:07:5a:90:e8:
a7:33:0d:27:24:58:4b:61:4b:08:ae:60:23:55:d3:57:f8:a5:
1c:fb:a9:6e:2c:9b:1b:d6:f5:de:38:4a:01:61:1a:f7:ba:75:
25:3f:59:c6:b0:d1:ae:c4:7f:66:3a:0d:75:58:88:61:54:2a:
c8:fa:54:be:02:9c:d6:2d:6c:cf:0d:f9:f5:39:ac:78:08:8c:
c5:42:1d:92:ab:b6:b3:e1:91:87:35:00:bc:a9:6c:e5:f0:18:
d1:0d:59:da:70:5f:47:0f:4a:f3:46:0b:63:7b:66:df:72:36:
cc:eb:d0:e0:3d:99:03:ec:44:99:c5:60:1d:9a:92:f6:13:09:
11:6a:fd:ba:50:e0:18:1e:68:4d:59:fa:ba:7b:8c:cb:d5:86:
5e:42:98:89:34:ee:bb:f5:84:01:b9:b6:4c:b6:8f:9f:cd:9f:
57:6f:ba:de:7d:c5:8a:2f:1a:c5:46:85:bf:f8:fc:0a:8b:72:
9b:26:18:6b:d1:22:cf:2d:59:29:ae:38:5f:73:d7:d6:03:cd:
da:bc:27:fc:67:0f:09:20:cc:1f:c9:00:20:6e:df:e9:e7:a2:
2a:10:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:20 2025 by rpki-client