Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: 882xhvmMEm6sCpQzOEbBbLl1Av2gpaBYpZBmXUcqa78=
Subject key identifier: 9F:D6:C0:DB:C7:4B:43:EB:00:1E:58:6B:63:16:A2:98:4E:5B:4C:A9
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 01984475F449D83C4E962CF938A30E677343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 0768
Signing time: Sat 26 Jul 2025 02:00:37 +0000
Manifest this update: Sat 26 Jul 2025 02:00:37 +0000
Manifest next update: Sun 27 Jul 2025 02:00:37 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: E+a2RWPkCYNWbDbl+WVV0uNVzr85ST3AkKYb8vMFQQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:f4:49:d8:3c:4e:96:2c:f9:38:a3:0e:67:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Jul 26 02:00:37 2025 GMT
Not After : Jul 27 02:00:37 2025 GMT
Subject: CN=9fd6c0dbc74b43eb001e586b6316a2984e5b4ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:d8:f4:4c:9e:da:22:ff:f3:b3:c1:98:4b:
e3:68:98:b9:33:94:db:74:65:29:cf:09:4a:7c:59:
c7:2b:19:67:86:53:7f:44:e0:5a:47:df:d3:b1:71:
9e:94:ef:c0:c9:1b:81:3d:ac:71:ea:b8:03:6b:2b:
1a:71:31:c1:57:99:d4:1b:f9:84:e8:f8:a9:34:83:
dd:87:2b:42:19:0b:35:ec:30:0a:81:22:a2:0d:d8:
8e:b1:06:40:de:bd:c4:eb:3b:22:a8:39:8d:62:6f:
55:8b:ea:1c:ee:32:c9:96:12:df:ea:c5:e3:9d:4d:
4d:cf:16:2f:d2:96:87:23:11:0a:7f:6e:f2:6d:a9:
33:44:cd:ea:cf:9c:1c:66:aa:fd:9d:24:08:1c:e0:
80:b2:82:c1:b7:53:17:9b:67:d3:58:97:37:c0:36:
bf:7d:ae:26:e4:d7:c0:a0:5c:c1:6a:91:51:b5:6c:
bc:64:3f:74:58:b0:62:c6:98:13:21:83:f2:ea:1d:
82:d5:87:e4:b9:a0:84:76:4e:da:9e:c2:72:4e:fa:
50:04:4e:96:ae:38:d4:16:e1:9d:36:57:15:e1:38:
b4:16:aa:5e:46:33:1b:dc:70:ae:3e:ba:af:6e:e2:
85:c3:7f:8c:0d:e2:2d:15:6a:1a:33:06:aa:c6:53:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D6:C0:DB:C7:4B:43:EB:00:1E:58:6B:63:16:A2:98:4E:5B:4C:A9
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a2:ce:c8:70:98:3a:34:d7:89:49:c7:ab:54:2a:bf:7b:99:
66:4c:7a:db:b6:ae:49:ea:69:33:c8:1e:37:a2:fb:d3:9b:63:
94:32:6e:c8:da:8d:ce:4e:7e:e0:c5:22:6d:c5:6c:cd:6e:de:
35:ce:de:65:ae:de:45:da:3e:e5:51:a9:ce:a9:d2:72:78:95:
50:5b:cb:df:2e:d0:20:83:e4:50:7d:8d:96:d6:fe:f0:18:40:
02:44:82:c1:11:0c:a9:a8:b3:14:b5:33:e7:4b:c5:1d:4e:96:
ac:fb:97:e0:c7:9e:98:8b:e9:24:81:1f:c3:27:de:86:e4:03:
ef:6a:63:42:3b:f1:83:a7:b3:a7:40:36:f8:d4:0e:ee:ce:32:
0d:a5:f6:05:8a:14:e7:ab:65:1a:99:bd:a1:84:6f:f0:b1:ac:
ec:6b:37:8b:90:79:18:4f:c5:9e:1c:2d:33:58:a4:38:62:40:
c5:44:2c:03:47:da:87:3e:07:c4:4c:af:cd:9e:bd:90:a2:29:
7e:d5:9f:f7:b8:27:e2:26:63:7c:79:49:d1:ba:26:bd:69:e0:
f6:d1:d6:c2:9f:56:a8:c3:22:db:82:13:ad:7c:10:89:6e:be:
75:75:4f:3b:ae:84:60:cc:e3:ea:91:bc:6b:1d:56:ee:2f:37:
72:b1:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:31:25 2025 by rpki-client