Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
File: jDJOtM17M3hJro0yb8iZAvUDpMY.mft (raw, json)
Hash identifier: ucvtmN4QfsxbELixnk9j7cZHQxuM7rpX/F8IXxooZsE=
Subject key identifier: 5C:59:F5:E6:66:28:A4:4D:EE:A7:1D:A9:86:F1:59:2F:1C:A0:9C:53
Authority key identifier: 8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
Certificate issuer: /CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Certificate serial: 0199179AAAA45B961A1DFB520E0F8050ED36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
Manifest number: 0122
Signing time: Fri 05 Sep 2025 02:00:36 +0000
Manifest this update: Fri 05 Sep 2025 02:00:36 +0000
Manifest next update: Sat 06 Sep 2025 02:00:36 +0000
Files and hashes: 1: jDJOtM17M3hJro0yb8iZAvUDpMY.crl (hash: kRZQMsUko02uPTa2eyj+HacX49vHsyMuKbtjUXhrf5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:aa:a4:5b:96:1a:1d:fb:52:0e:0f:80:50:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Validity
Not Before: Sep 5 02:00:36 2025 GMT
Not After : Sep 6 02:00:36 2025 GMT
Subject: CN=5c59f5e66628a44deea71da986f1592f1ca09c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:99:17:2e:e7:e8:e6:54:66:6d:53:3e:3c:
f3:08:aa:27:37:28:4c:5d:a3:60:fd:f8:2d:92:fe:
91:3b:01:cd:d9:ba:b7:11:cc:aa:ac:a8:7c:04:8a:
ff:83:01:cc:09:49:52:49:54:83:cc:e1:27:20:e7:
6a:4c:3c:7e:a6:2f:fb:05:6b:dd:28:16:38:58:0d:
cb:6c:2c:7f:bc:42:f3:0d:11:f3:1f:77:08:c0:c5:
14:b0:c6:a4:7c:ca:af:9c:e9:eb:be:99:45:d4:47:
6c:56:1b:d0:6d:66:4b:b8:4a:1d:28:35:03:6c:44:
cb:31:53:23:3f:d3:32:33:ae:15:c4:ca:39:c7:1b:
95:0d:08:a1:1a:f9:27:8d:e2:55:24:e1:02:44:28:
d5:dc:ce:4e:08:27:c0:ac:e7:d4:fb:a9:7d:a1:d4:
21:b1:fb:ea:69:bf:3b:83:61:79:d2:03:bb:f8:2c:
5e:09:58:36:1e:97:94:78:e8:d4:f8:fc:1e:fb:43:
62:4a:63:28:22:d0:c7:89:f5:65:34:d2:75:ae:2e:
d7:63:ec:32:4c:99:ef:d8:6b:62:d0:fb:22:57:c8:
ca:30:7e:69:26:ad:94:4e:e4:7f:ff:0f:e5:34:7b:
bb:74:29:62:03:31:3d:99:17:9e:60:bf:5c:a9:03:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:F5:E6:66:28:A4:4D:EE:A7:1D:A9:86:F1:59:2F:1C:A0:9C:53
X509v3 Authority Key Identifier:
keyid:8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b4:0b:61:c3:63:11:32:e4:38:38:7e:c1:b8:1c:db:da:20:
d8:23:82:51:20:43:f6:96:7c:d0:31:18:15:65:2d:3d:25:aa:
aa:ce:18:dd:b7:a2:e9:1f:0f:7c:68:7a:be:61:50:15:36:eb:
5e:eb:6e:57:f2:f2:4f:6e:46:0c:fa:11:fe:db:10:45:c5:50:
e6:b5:a3:98:7c:22:07:98:bb:20:b8:d8:f2:de:17:fc:0a:d3:
64:4e:4c:05:19:5a:35:e8:cd:bb:5e:9f:bb:53:47:4a:21:df:
56:9d:85:82:15:42:53:ee:0a:6b:21:69:48:b9:5c:1f:bf:73:
bc:ca:c2:97:9b:8a:82:a6:66:39:3b:f9:30:a5:07:52:6e:d7:
50:59:59:e8:7e:cb:f5:5d:8d:42:d8:8f:07:a2:73:83:54:40:
c8:02:82:fa:8a:61:72:ad:94:ff:46:be:3e:52:68:cc:84:d8:
1f:84:3a:7e:4d:80:c8:d5:f4:3f:32:d9:e0:c2:b4:23:de:60:
f2:da:d8:47:cb:f3:db:d9:64:33:37:23:a8:93:3a:6f:50:83:
62:d7:0c:dc:55:82:83:87:f5:15:47:b0:db:23:de:3a:45:12:
ce:23:2b:f0:bf:96:ad:ff:64:b3:46:bb:ed:d5:67:72:1e:4c:
32:af:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:27 2025 by rpki-client