Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File: jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier: MBkUlGPMg6Z7uk3+TEQ0M8TVL2eRe9usz2YjRgRXo7w=
Subject key identifier: 0C:AD:6F:0A:F0:0F:3A:98:97:14:78:7A:F4:D8:9E:6E:0C:B0:4E:AD
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer: /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial: 01984A09B05D996436180F36DB9054AA1C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number: 15FC
Signing time: Sun 27 Jul 2025 04:00:05 +0000
Manifest this update: Sun 27 Jul 2025 04:00:05 +0000
Manifest next update: Mon 28 Jul 2025 04:00:05 +0000
Files and hashes: 1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: fWvrZ2nTiVyXGUV3Zi56+fUDiMty5M77J6x9qO/anWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b0:5d:99:64:36:18:0f:36:db:90:54:aa:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
Validity
Not Before: Jul 27 04:00:05 2025 GMT
Not After : Jul 28 04:00:05 2025 GMT
Subject: CN=0cad6f0af00f3a989714787af4d89e6e0cb04ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:93:8e:6f:0f:3d:cd:44:39:bb:c0:08:6e:
5a:1e:72:a9:93:be:5b:b9:f2:dd:4e:b1:6c:f1:86:
f7:a1:7c:2b:d3:d2:3c:ec:08:06:2d:f8:da:78:c8:
5b:2d:bc:97:c7:9e:87:24:5b:91:b2:d9:b4:79:78:
09:91:7b:4c:29:82:14:24:51:3c:56:e2:6e:f0:f7:
a7:65:71:4b:5f:30:8e:8d:fb:26:f0:86:e8:57:fc:
6b:3e:56:f4:0a:37:04:71:d5:b3:ff:e6:ee:7a:a2:
8c:29:ff:29:ba:0e:36:7d:35:3d:7f:55:10:22:94:
50:ab:7e:68:e7:59:e5:e9:56:8e:de:9d:a4:9d:cf:
42:be:d0:e2:46:e7:3f:e5:01:19:96:3c:86:57:35:
6e:dc:f9:ce:af:02:ce:24:64:ed:b7:27:cd:22:b6:
23:d1:05:11:04:9f:31:8f:50:a2:94:8e:39:69:10:
87:cc:ad:54:4e:b5:b1:3e:31:4a:b5:3e:a2:19:fd:
38:8d:7b:aa:76:a5:1d:a4:76:6f:ff:54:6c:5b:b7:
84:79:96:9f:af:da:27:e3:0e:9f:ee:7b:6a:1b:ff:
18:28:82:61:08:75:00:db:4f:58:32:51:f6:57:4b:
1d:6d:7c:8a:79:29:72:76:e5:a5:63:dc:9b:b7:de:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:6F:0A:F0:0F:3A:98:97:14:78:7A:F4:D8:9E:6E:0C:B0:4E:AD
X509v3 Authority Key Identifier:
keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a0:32:40:6b:b7:fa:cf:a3:e0:1f:bb:e6:50:53:46:08:ba:
0f:32:ea:f0:19:c0:ed:82:89:b9:83:27:12:ee:a6:d1:57:3a:
85:52:4c:69:a5:0f:6d:7a:3e:41:44:0b:b7:18:70:07:db:7b:
57:28:3e:0f:88:41:08:7a:30:cf:f8:5e:4d:c5:e3:37:97:5b:
cb:76:24:54:6b:79:36:3e:68:6f:85:11:0b:9b:dd:fb:f0:59:
2a:d5:88:18:3f:39:63:54:43:d7:dc:02:67:26:c3:46:3d:2c:
23:2c:9a:7a:c4:ba:f5:04:d8:a3:8d:8a:21:9a:9e:e0:86:86:
91:39:48:49:16:61:d2:92:a3:93:24:31:d7:0b:a0:68:cd:ab:
32:0b:49:55:37:70:35:28:5c:2a:0e:88:85:67:b1:28:9c:16:
ab:ee:d3:c8:82:7a:9d:5b:da:ff:2c:da:9a:8a:08:63:88:e4:
48:43:9b:e0:ef:65:37:f7:8a:48:25:76:c5:f7:b1:50:10:ec:
07:60:6c:9a:d1:78:cf:6e:81:b6:ff:1c:52:6c:b0:03:39:94:
80:16:e1:ac:35:11:93:4b:56:36:82:9c:30:0b:31:2d:85:9d:
f2:3e:5a:b6:2a:a0:15:69:84:68:db:2c:01:e0:65:7f:92:c6:
a1:06:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:29 2025 by rpki-client