Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: 6nrt/c3YV5bDpnZUin+9DLpzxkMQqTp+JHRk/jpMITw=
Subject key identifier: 10:84:09:03:F0:08:E7:75:60:F8:B1:86:3A:22:BE:A8:C2:D7:AE:06
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 01984B553334E5B3AACED7842C4B290A6512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 10:02:11 +0000
Manifest this update: Sun 27 Jul 2025 10:02:11 +0000
Manifest next update: Mon 28 Jul 2025 10:02:11 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: ItYjXHZuNOG7NRkagYY9lQKe6iJB9xFNk4CkfniOyOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:33:34:e5:b3:aa:ce:d7:84:2c:4b:29:0a:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Jul 27 10:02:11 2025 GMT
Not After : Jul 28 10:02:11 2025 GMT
Subject: CN=10840903f008e77560f8b1863a22bea8c2d7ae06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:7f:7b:e7:5c:08:b6:5c:b7:00:2e:36:5d:
4e:59:03:b2:ac:93:65:37:d0:9c:2b:44:ff:1a:0c:
6c:bb:42:7e:10:f5:01:55:63:f9:40:c8:f4:5c:ab:
e0:2c:04:04:ea:a3:9b:12:d2:bc:12:2b:84:3d:36:
17:89:55:66:6c:a0:a3:46:1d:80:f0:9d:14:c1:5f:
c8:a0:ef:5e:a4:b4:50:f7:de:4e:79:ee:7e:c6:73:
45:c4:10:23:46:d4:f1:4a:a7:af:de:b7:2e:c6:dd:
cd:0d:23:35:a2:b1:34:89:df:06:92:62:d1:75:18:
00:14:78:9f:69:56:39:bf:bb:f3:58:31:b4:12:31:
b7:2a:07:b9:3f:19:13:c0:26:15:0a:4a:77:38:93:
5d:64:bf:56:b1:ec:12:5c:99:30:99:3d:c1:72:49:
04:18:cb:8e:eb:cb:03:3c:de:a9:36:ff:c3:b1:e8:
9a:d9:dc:03:47:13:ac:87:b6:8e:16:3e:a3:84:5d:
75:95:a8:20:e8:2e:0e:c6:9e:38:a1:e5:af:ad:6b:
2e:97:8a:cc:60:54:64:6b:60:9e:b8:ca:50:30:52:
c7:0a:ce:e2:91:09:b6:a7:60:ab:ec:1c:fd:e0:5f:
fa:37:9e:34:f3:40:da:e3:a3:30:64:f5:83:af:12:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:09:03:F0:08:E7:75:60:F8:B1:86:3A:22:BE:A8:C2:D7:AE:06
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:69:b8:ad:a6:84:7f:a2:ae:52:c4:4b:1b:a2:1c:7d:ed:
b0:47:c3:c4:72:cf:b4:ce:d5:4e:19:b9:02:73:ff:a7:89:1c:
f4:ff:3b:09:2c:9b:c2:cc:c1:84:4f:fc:0f:76:00:26:0d:d4:
17:83:bc:a4:e3:13:7d:25:54:9b:5c:bb:f5:e2:5f:38:ed:28:
9a:c6:fc:05:b7:eb:7a:98:fa:26:ea:5a:35:c4:f1:3c:a0:26:
8c:4a:34:f1:cf:89:9a:d0:d8:5d:25:f7:44:83:53:e4:e4:8d:
4d:66:98:3d:2f:76:49:39:0b:da:dc:f9:7d:54:2b:3f:f7:e4:
6f:7f:bf:f8:1c:78:e9:46:c1:e5:76:0c:3a:6d:8b:3b:9f:b5:
71:7c:b1:97:1c:79:2c:7e:1f:18:49:ed:00:25:62:c0:3f:5a:
73:ef:a3:92:fe:36:60:a6:da:fb:2b:9a:a7:5c:9a:e0:15:7c:
b7:b0:89:8f:4f:b5:e8:fd:75:9f:94:6f:26:36:4b:1a:00:5d:
2a:71:a5:33:c3:f8:65:ec:a5:26:b9:3d:5a:42:74:36:72:2a:
1d:63:74:df:17:60:c0:18:09:f6:66:1a:2a:c3:12:79:84:f8:
5f:f1:a3:46:23:47:68:00:00:eb:06:a3:c7:4f:ba:b0:93:8a:
b8:85:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:24:13 2025 by rpki-client