Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: skBF5LTbiE2KG+0JZvVzjMc6R1Yib8a3NVXcbTWqOYQ=
Subject key identifier: 60:51:98:0D:77:CC:10:42:C2:F6:08:65:48:83:85:3E:F3:2C:21:4B
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 019849664DA64469C44A9BEDB60D22A2D1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0BA9
Signing time: Sun 27 Jul 2025 01:01:37 +0000
Manifest this update: Sun 27 Jul 2025 01:01:37 +0000
Manifest next update: Mon 28 Jul 2025 01:01:37 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: SPD5AnI9pfdPYIMSWG1+p1biJaugc2j0W43oADgc1jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:4d:a6:44:69:c4:4a:9b:ed:b6:0d:22:a2:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Jul 27 01:01:37 2025 GMT
Not After : Jul 28 01:01:37 2025 GMT
Subject: CN=6051980d77cc1042c2f608654883853ef32c214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:d4:32:0e:58:1d:16:17:c1:b9:93:46:24:
4a:66:92:f9:74:54:73:bb:f6:99:33:83:b1:45:e3:
4c:e6:23:4d:9a:b6:bd:7f:4c:aa:89:75:ca:41:8f:
6b:f5:bc:12:88:6c:ee:99:41:c2:80:3c:02:35:50:
58:de:4b:0e:e1:58:68:05:39:57:45:6f:b3:3f:62:
d7:4e:92:bc:a4:b7:5c:90:69:81:24:0d:81:34:27:
10:29:60:14:1f:c4:3a:10:df:d5:e3:43:8c:b3:b6:
5c:3b:e9:93:84:7c:4d:0e:76:77:04:e5:37:f9:66:
3b:a7:04:3d:59:0d:a8:1d:28:a4:cc:13:0a:1b:6f:
fd:c9:2b:26:68:83:14:35:29:2d:e0:47:63:e2:41:
e7:ae:ed:b9:cd:34:09:a8:5c:8e:e8:20:4a:e5:04:
12:5b:85:6a:39:0c:4d:ff:24:a8:6d:7d:d7:07:03:
d3:92:49:60:98:cc:44:a6:12:3f:60:54:18:7c:f0:
2f:79:34:01:f9:a9:07:04:a5:ba:bf:9a:a2:3b:de:
4e:56:97:de:d1:91:fe:10:98:29:bf:db:3e:9f:e6:
81:b2:16:f8:9a:9f:f4:48:5e:f4:db:cc:71:93:56:
81:a5:83:ae:d8:c4:38:0c:b1:6e:ef:8c:8a:b5:50:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:98:0D:77:CC:10:42:C2:F6:08:65:48:83:85:3E:F3:2C:21:4B
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9e:39:ba:19:00:a6:a1:62:7e:c7:9b:6b:9d:13:54:61:d4:
3f:9c:03:10:5e:07:25:a9:ff:3e:a3:e0:bb:c5:e0:c1:bb:da:
67:e0:fb:34:18:a4:30:7a:c5:ae:83:f2:22:ed:3a:fb:31:14:
37:8b:3a:aa:13:bc:5e:01:ef:cc:46:56:0b:68:36:33:62:13:
8c:cd:3a:6a:94:09:20:85:bf:42:6d:07:a4:d1:6d:aa:30:b6:
09:7b:9f:78:99:c1:0f:b1:3a:66:59:1c:50:b2:c2:16:50:06:
9a:10:ab:ae:ac:df:11:33:6f:82:b1:cb:42:b8:7e:47:bf:e5:
1d:2c:ac:76:13:60:c3:43:31:93:b0:ff:59:79:be:4f:22:ce:
94:71:67:e4:96:a7:84:98:a2:da:08:d6:d8:21:ec:34:77:ea:
ca:0f:da:60:2b:1b:a7:39:dd:8d:11:9a:a9:32:8f:1f:4d:0d:
8a:66:f5:d9:21:2a:53:da:b6:79:c2:9b:3d:c4:2d:1f:5a:22:
43:b9:c6:63:dd:9a:d6:96:63:fa:b5:9f:77:73:a4:31:6a:e3:
0d:ff:a9:f8:fe:3a:20:b6:04:4b:30:5a:02:97:c0:56:ae:b6:
12:8c:30:09:32:4f:c7:49:3a:3f:a2:0d:36:75:2c:94:94:ca:
b6:06:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:24 2025 by rpki-client