Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: 96Lzj99ymF6PKyH2XCfAmaMLlG2kPJCxkplLy3R526U=
Subject key identifier: 7B:39:13:02:CD:55:71:71:57:32:15:7E:9F:D4:66:68:99:34:F8:7C
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 01984AAEF0DA5A55ABB31D9810269A853E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: 0153
Signing time: Sun 27 Jul 2025 07:00:35 +0000
Manifest this update: Sun 27 Jul 2025 07:00:35 +0000
Manifest next update: Mon 28 Jul 2025 07:00:35 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: 72xdlp/h24y+0+9OAW2N3YHlqigsMp8nVfnHJDS1nwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f0:da:5a:55:ab:b3:1d:98:10:26:9a:85:3e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Jul 27 07:00:35 2025 GMT
Not After : Jul 28 07:00:35 2025 GMT
Subject: CN=7b391302cd5571715732157e9fd466689934f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:71:a5:b6:61:69:bf:be:13:62:de:17:3f:
d5:53:b5:50:03:0f:4d:71:ef:f0:b5:88:d4:3a:99:
a4:ed:5c:30:f0:bc:8d:6a:92:01:d1:f8:b2:17:61:
8e:92:7b:98:e8:2b:4c:47:ae:78:a9:f2:b6:e4:72:
30:c8:85:5b:54:4d:91:9d:08:f6:d6:db:92:6e:99:
de:3c:39:98:cc:49:7c:78:dc:3d:3f:15:2e:f6:f2:
f2:d6:db:e6:32:9b:db:0b:21:05:49:2c:82:99:c8:
0c:6d:41:d4:30:29:cb:82:02:60:83:95:28:6d:6d:
a3:5e:11:18:8d:d1:6b:01:54:03:8e:0b:97:02:0a:
de:1f:f6:a2:c1:2c:3f:99:c8:dd:8f:02:a0:6a:7c:
84:9a:f3:79:18:91:a3:75:ef:03:a2:5f:a9:47:fe:
09:1d:a3:22:87:28:41:4d:7e:4a:ee:78:b2:38:e8:
13:a8:a2:8e:e5:7c:57:e1:2f:90:6b:44:09:64:6f:
fb:65:21:1a:4a:07:8d:fe:24:cc:70:51:e0:b2:41:
be:34:84:d0:2d:42:85:bc:6e:35:78:93:13:db:d2:
e5:5f:e5:84:1d:02:a4:94:dc:eb:22:78:2a:57:ca:
d8:7b:70:dd:f8:88:03:63:b0:5c:ef:4d:c0:ca:1f:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:13:02:CD:55:71:71:57:32:15:7E:9F:D4:66:68:99:34:F8:7C
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fe:79:39:31:d5:bc:98:19:ca:ef:10:5c:67:b2:07:6c:22:
c8:64:ce:07:6d:38:b9:4e:e0:e5:6b:21:11:79:2e:f0:48:87:
e1:c4:6d:7d:bb:5d:1c:ad:6f:f0:f3:a8:29:b9:a1:fe:64:e0:
28:6b:5a:4c:e5:67:e7:1c:46:de:c4:d2:7f:69:cc:82:6b:b2:
97:0a:64:cd:fd:09:28:51:c7:38:3d:04:c7:04:e0:0e:0e:ad:
eb:f6:a1:ab:51:9f:8c:04:15:b4:ab:d0:7a:be:7e:55:80:a9:
1b:09:38:0a:5b:58:c6:9a:52:24:85:48:b7:14:1e:75:bd:7f:
4c:2d:18:21:02:a5:e5:c3:43:ee:d3:e3:2c:a3:5e:4e:81:73:
ef:d2:b9:21:78:a9:1d:a0:1f:67:bd:b3:38:83:ff:48:a2:63:
cc:d2:cb:c9:55:77:73:6b:8f:3a:84:b1:5b:86:c9:57:6f:d7:
da:f9:16:74:ce:c3:c5:90:4a:47:ef:1b:0f:23:6b:31:b9:ee:
7f:ac:ec:67:95:02:56:2b:eb:e8:62:cb:aa:c5:7e:f6:94:04:
51:29:ec:d8:f3:ef:83:d6:be:12:f2:90:d9:ad:61:f4:d6:9c:
48:cb:c0:3a:b9:ab:71:b7:21:29:5c:11:e2:0a:10:2c:68:1c:
9e:1f:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:42 2025 by rpki-client