Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: oy7Ff1IboBNBRCGGBSdaAiowoh0qenPubw6lsQ5Gf5M=
Subject key identifier: 25:15:D4:AC:04:76:E5:3A:E7:7B:0A:72:7F:27:12:F1:20:AA:09:F3
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 01984A77B10ECBE45126DECF2062C6723858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 0563
Signing time: Sun 27 Jul 2025 06:00:14 +0000
Manifest this update: Sun 27 Jul 2025 06:00:14 +0000
Manifest next update: Mon 28 Jul 2025 06:00:14 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: FYAyWtBdbKLFJmb4Q65d+mzjSRwWtNCuSbB0VpFJmw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b1:0e:cb:e4:51:26:de:cf:20:62:c6:72:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Jul 27 06:00:14 2025 GMT
Not After : Jul 28 06:00:14 2025 GMT
Subject: CN=2515d4ac0476e53ae77b0a727f2712f120aa09f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:4d:1a:a8:c6:c1:40:0c:08:eb:db:4a:0d:
3e:d4:1f:18:0e:cc:0b:c6:bf:1f:c6:e4:a1:0f:22:
11:38:39:3f:ba:83:3e:a4:23:3c:f8:d3:25:78:bd:
b4:2f:18:95:09:9a:b8:66:af:c2:2f:b1:b4:9b:90:
20:57:a4:e2:0d:8c:6e:07:30:78:dc:e9:0e:9e:c1:
e3:2b:73:5d:f9:15:5b:2f:45:a0:40:a4:00:2b:fe:
53:e1:5f:ef:2c:6c:c7:4b:67:81:2e:7c:58:1d:bf:
64:69:2e:08:7a:ae:50:e5:c7:78:20:47:c3:6d:7f:
c4:29:58:fe:11:ae:e1:de:52:cb:bf:70:fb:cd:a5:
67:3c:4c:e5:84:16:ea:e1:1f:31:46:8d:38:06:06:
70:11:90:c4:45:b0:d4:24:db:f3:86:e5:2a:86:60:
79:73:a6:a3:84:37:15:f6:86:31:0c:d6:cd:43:1c:
83:62:17:57:2c:5c:93:b9:93:62:b9:e8:5c:ca:82:
b3:c7:80:87:bc:c1:ef:ac:fa:75:b2:49:6b:7d:cd:
4e:58:61:a9:fe:b7:61:2e:2d:a4:0b:cf:c6:19:4d:
f5:7b:4e:81:f5:6e:1b:5c:36:86:a6:eb:28:9b:3b:
f6:f7:f4:71:d5:fe:57:92:1b:e5:de:8a:77:3c:65:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:15:D4:AC:04:76:E5:3A:E7:7B:0A:72:7F:27:12:F1:20:AA:09:F3
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2b:c3:c5:4b:59:85:2c:63:eb:6b:3c:3d:46:6a:c4:d0:74:
15:e1:02:91:f8:91:08:fe:c2:a5:1f:47:a1:1d:20:8f:11:d1:
1c:16:b0:d4:07:fd:bb:7e:16:8d:5d:35:22:fe:e8:99:46:27:
b0:3b:1c:72:d9:5d:38:e1:d8:74:33:c6:0b:d3:2f:3a:d1:b3:
35:e0:df:d0:d9:4a:0e:0f:dd:85:9b:d2:da:cc:7e:e9:07:aa:
72:f2:73:e3:c9:1b:d1:51:f7:60:89:41:33:8f:68:7b:dd:96:
bc:55:5a:ad:20:06:ef:61:53:5e:96:a4:30:eb:96:34:91:a6:
b0:58:91:04:66:0f:a9:08:ad:c7:9d:bc:e1:c9:95:95:48:52:
a9:87:98:53:5a:3f:7c:75:59:fb:b1:1b:9e:71:58:3b:01:7d:
40:3c:3c:f5:42:39:df:20:e6:38:cc:44:d3:1a:3c:16:ed:b8:
62:6e:b0:62:83:3d:8f:f6:b2:77:3d:ca:a9:91:2a:6b:1d:42:
44:96:06:c2:8d:89:cd:73:0d:ce:e8:7a:2a:e7:64:93:e2:ba:
17:b0:6d:da:4d:af:2b:f8:f1:43:f6:7c:c8:54:a1:ec:ef:56:
5f:b2:b8:1e:05:e0:ce:0a:8f:37:16:3c:1b:48:f0:a4:93:3d:
73:a9:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:14 2025 by rpki-client