Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
File: jRHN6i8zL8ztMzil3x-y30Uh-OI.mft (raw, json)
Hash identifier: cMKqlyYbxAL1VPQNurYLFiQ6K109sXv0x7Tx9gttAgg=
Subject key identifier: A3:4A:54:A8:BF:5A:6F:01:62:38:42:E3:F4:DB:C7:6A:77:05:FE:16
Authority key identifier: 8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2
Certificate issuer: /CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2
Certificate serial: 01984B5473E91034AE684D3D03D13E327E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
Manifest number: 1116
Signing time: Sun 27 Jul 2025 10:01:22 +0000
Manifest this update: Sun 27 Jul 2025 10:01:22 +0000
Manifest next update: Mon 28 Jul 2025 10:01:22 +0000
Files and hashes: 1: jRHN6i8zL8ztMzil3x-y30Uh-OI.crl (hash: cFv7Xb4ORDCma+taiUxLbYC+S3k1pl+hahzj6iRV0wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:73:e9:10:34:ae:68:4d:3d:03:d1:3e:32:7e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2
Validity
Not Before: Jul 27 10:01:22 2025 GMT
Not After : Jul 28 10:01:22 2025 GMT
Subject: CN=a34a54a8bf5a6f01623842e3f4dbc76a7705fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:44:d0:60:91:d0:e4:ee:b7:14:e7:19:c7:
1f:73:98:2c:20:df:2c:5d:41:df:02:73:cc:ed:39:
e6:f2:81:f9:3c:1b:d2:ce:19:49:b6:54:b9:3e:8b:
c7:ee:c0:10:af:04:62:12:89:23:70:79:a4:ef:99:
73:2e:39:e3:f5:a7:b4:5b:3e:08:7c:f2:47:d0:55:
de:57:e1:e6:bd:40:ec:2a:7c:72:3a:fc:9d:4f:cd:
db:70:c5:58:18:02:08:0d:ff:32:79:9e:79:27:f6:
c1:01:14:b1:3c:76:e4:24:a1:62:24:b8:ca:e8:50:
0c:be:d8:4b:46:09:8d:e2:c9:90:42:9c:23:5f:57:
1e:88:e6:92:d2:42:b0:e2:7c:fd:4a:16:a3:bd:6a:
4a:c9:e7:ab:81:62:c1:6b:0f:66:48:e4:a7:19:e2:
68:90:5e:04:33:f0:e3:45:05:77:b0:2e:a2:da:fe:
f7:5a:e4:89:3e:9e:5d:e7:2d:81:d8:e6:d4:0a:94:
6e:ee:29:bb:44:88:b0:bf:6d:5f:4c:68:4b:d7:cf:
21:e3:50:5c:82:2c:d0:08:7d:cb:59:b8:98:b7:0e:
1b:25:3e:b8:e2:52:74:f7:48:37:1c:84:c0:a8:4e:
cc:1b:0a:78:8f:d2:f3:2d:aa:3c:40:8d:49:85:95:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:54:A8:BF:5A:6F:01:62:38:42:E3:F4:DB:C7:6A:77:05:FE:16
X509v3 Authority Key Identifier:
keyid:8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d4:4d:f5:af:ab:52:82:da:03:1b:b9:a6:0d:ea:d8:a2:30:
e2:f3:d7:6e:75:1f:04:2d:b1:5b:20:f6:70:26:57:b2:d9:93:
50:05:e9:52:66:cc:dd:4a:fd:9b:69:ff:75:9f:26:81:23:0c:
ef:34:cc:bb:1e:e8:1a:7d:4e:c7:6a:dc:dc:ca:1d:5d:28:a3:
be:42:1f:19:3e:72:be:ef:70:91:39:a8:40:df:80:9e:1d:28:
ab:08:41:0f:1b:e4:d1:2e:7b:f9:31:7d:32:22:68:ea:e4:07:
de:b9:8d:db:2e:d5:07:80:8d:40:11:45:82:38:c7:4e:75:bb:
39:31:92:e1:fc:2c:9e:4a:60:eb:6a:47:f5:5e:8e:d1:38:86:
6b:16:4a:95:6d:b1:81:fe:f6:da:38:1d:7d:67:f3:02:c8:d6:
2d:8f:dc:ff:56:29:e3:a1:d8:b7:1c:56:27:2e:52:03:f1:c5:
39:94:94:0d:dd:02:d4:a3:82:bb:8d:c4:bc:c0:ff:2e:0d:af:
44:a4:03:b9:6e:ac:f4:bf:a8:21:be:f4:df:80:87:c2:2d:99:
1f:6d:27:32:76:b6:2d:dc:4c:88:88:0d:45:90:7a:b5:53:86:
52:87:23:d9:dd:15:e8:2d:68:22:c5:49:86:2a:57:1c:5a:e1:
c2:5c:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:33 2025 by rpki-client