Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: VJts6aqRfBCOWzuWnwj5MINPDV7+rRViwk6q9fBOo5c=
Subject key identifier: C6:B5:AA:8C:23:B9:7C:A5:CF:77:A0:56:6E:06:A3:8C:92:AA:76:F8
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 01984A413ABD10B7118909E2DF0F0B8971EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: /OyFGEmGXHPLkHoc536vZB1oKW11DHS4PJNT2wwrrRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3a:bd:10:b7:11:89:09:e2:df:0f:0b:89:71:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=c6b5aa8c23b97ca5cf77a0566e06a38c92aa76f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:c8:e4:2f:0e:c7:44:85:87:dc:24:6d:06:
e8:2b:1b:f3:ea:f5:81:1d:bf:45:61:b7:fd:8e:a9:
9c:ec:d8:67:bd:bc:7e:c4:23:27:f0:1f:0f:27:b9:
17:28:da:0f:ff:b9:c3:56:b3:34:24:93:61:19:15:
8c:6d:b8:a2:ea:3b:4a:a9:5f:86:42:2f:c5:da:fc:
16:30:a6:16:e7:ed:61:38:6a:c2:83:6c:8a:27:22:
16:02:ab:af:dd:86:44:e8:81:60:15:12:4c:15:93:
41:5a:06:02:f2:f4:ea:80:57:cd:24:9d:6e:16:8f:
9b:1c:91:77:b1:21:59:df:9e:bf:65:11:cf:e6:17:
c9:8a:54:b5:61:96:a4:fc:8e:6c:9f:97:a9:76:3a:
cc:b3:b4:31:ca:e2:fb:00:87:4a:13:43:17:ff:39:
4d:f3:d4:c0:b3:62:5d:d5:3b:a7:5c:4b:fe:78:f0:
82:d4:b6:8a:fd:d9:d2:45:d9:12:5f:dc:c1:e4:53:
e8:84:01:b7:b2:90:c0:d5:30:ef:5e:2b:cd:aa:a2:
00:aa:23:d3:aa:52:4c:41:67:26:c4:02:01:a5:83:
fc:9a:cd:f5:85:8d:67:79:1e:0d:e7:b2:93:96:4e:
84:b5:79:1f:ef:2f:a6:e3:cb:0c:5f:bb:3a:b2:92:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:AA:8C:23:B9:7C:A5:CF:77:A0:56:6E:06:A3:8C:92:AA:76:F8
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:15:11:38:b7:5a:e6:26:26:9c:1e:5a:99:f3:55:3b:19:46:
53:05:21:0c:04:78:c0:ce:36:59:b2:9c:48:60:5b:dc:cb:87:
f1:8b:67:17:a0:9b:a9:40:22:d7:0d:47:d4:51:ac:43:f1:11:
43:4d:b4:ec:15:48:b5:fc:57:91:eb:5b:03:f7:8a:6a:c4:ea:
b7:00:15:95:78:f9:f9:76:4c:c2:9c:21:ed:fe:a9:49:3f:2b:
03:5d:51:63:e3:84:47:b4:c1:f5:55:bf:5d:cc:cc:19:a3:08:
92:9b:58:d1:d8:52:41:71:4d:6d:cb:e0:b5:06:d1:c3:62:40:
5d:01:f5:f7:25:4e:74:0b:70:47:26:96:83:dd:f0:f5:4c:85:
1d:b4:a2:aa:09:07:dc:8c:14:46:02:da:de:8d:4b:b7:15:a5:
63:ae:cd:c1:43:e6:bb:d3:d0:07:09:d2:5d:63:98:51:4d:e9:
65:fc:34:ab:e1:52:b3:8f:d8:00:a1:76:73:90:7d:6a:0f:05:
1b:8e:46:24:7b:23:4d:41:a7:19:a7:ef:f0:a2:9b:10:f3:43:
ad:78:ca:2c:c3:21:bd:e1:af:ec:f5:ba:23:14:5a:91:9a:7f:
47:60:f9:f6:51:8b:b6:5a:73:b3:10:04:6f:87:4b:f7:ce:ed:
ba:b0:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:13:26 2025 by rpki-client