
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: NWmX2aO4zpEkiprisPK7HfR75qfZRUUCfDeZdQZ0haw=
Subject key identifier: 0F:26:2E:10:CA:7F:96:F9:C7:6E:4F:41:1A:16:59:70:75:8B:F0:7D
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 0199221E99F97F8F3FA2589B0C549DC03045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 03:00:54 +0000
Manifest this update: Sun 07 Sep 2025 03:00:54 +0000
Manifest next update: Mon 08 Sep 2025 03:00:54 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: XTTbx5o5BBbelCFTWhi6ISpQD0QSJX2xqgC0REzBtn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:99:f9:7f:8f:3f:a2:58:9b:0c:54:9d:c0:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Sep 7 03:00:54 2025 GMT
Not After : Sep 8 03:00:54 2025 GMT
Subject: CN=0f262e10ca7f96f9c76e4f411a165970758bf07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:e0:56:89:83:4c:03:b5:c2:e9:74:d5:ae:
2d:db:c1:98:da:55:ad:bb:52:33:97:ee:e8:12:be:
a8:a8:e8:68:03:47:2c:69:ce:4e:2e:c3:55:c9:50:
8d:45:74:16:02:19:d3:df:f0:2c:04:59:60:47:1e:
cf:dd:86:5c:1c:5f:c2:37:e6:31:eb:fc:a0:e0:7a:
e4:03:21:cb:e0:5f:b2:49:bb:19:56:e5:da:f4:2f:
44:ee:6c:8c:e0:9b:4d:14:1a:24:6f:3d:cc:91:31:
c0:2b:80:1e:dc:0d:d0:5c:ad:b3:ed:d6:d4:af:6e:
4c:52:10:e6:9a:ef:5c:32:1a:e6:ff:6c:45:3f:9b:
a0:8e:43:e9:02:26:9b:d4:fe:b1:9a:73:04:a9:b3:
74:fe:d2:6b:07:34:c9:cf:2e:6f:ea:5a:ea:55:47:
69:71:aa:67:13:78:14:dc:d1:22:47:16:5d:b3:c4:
0d:c0:01:54:a8:7a:24:c8:5c:04:ff:88:20:3f:e8:
44:f5:98:1b:6f:c5:60:d2:6c:46:8a:fe:50:7f:54:
58:0b:b8:1b:c3:81:44:89:9f:cc:56:85:2d:43:08:
41:c3:1f:3b:32:37:bb:77:2a:5c:71:c3:bf:61:86:
9e:95:c7:23:a0:1a:8d:f5:82:af:8d:ca:ee:b9:c6:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:2E:10:CA:7F:96:F9:C7:6E:4F:41:1A:16:59:70:75:8B:F0:7D
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ec:10:85:3f:01:5a:0c:75:37:0c:3f:cc:23:d0:38:71:b7:
38:5e:bd:b9:87:28:45:f6:bf:49:a9:30:5e:91:44:00:9b:b2:
e9:58:42:3e:cd:9e:e1:6c:95:f0:90:99:df:00:7e:33:e2:56:
b1:b0:05:05:d9:aa:87:36:e3:12:eb:3f:d4:82:52:13:52:86:
a6:ce:03:9f:08:f2:a9:fe:9d:af:17:93:06:b9:fb:98:93:e5:
da:c7:ef:f4:4a:ec:e8:06:86:8d:10:ad:e6:c8:85:ba:28:fd:
84:7d:cf:80:fc:43:d4:7a:34:fb:68:0e:d5:d8:da:7f:1d:d3:
43:92:36:62:f3:5d:7f:2f:a1:10:a4:22:23:8c:0a:26:73:a1:
23:75:f1:ce:c1:c0:f4:9d:09:97:8f:6f:d1:1c:d4:2c:d8:b3:
3f:0a:2c:50:b6:f4:13:82:f1:09:c9:18:d1:a3:09:ac:75:fd:
7b:05:20:f1:ee:76:9d:b2:6f:a5:41:b3:fe:39:27:c1:0a:fe:
50:a1:a4:0d:94:29:32:aa:97:aa:57:66:a8:63:8d:e7:67:95:
6c:8d:1c:a8:f8:45:fd:3c:ec:44:88:91:d4:fb:62:c5:e6:99:
f1:b9:bd:4d:32:2c:b3:93:54:20:a5:ae:5d:3f:7a:d2:98:4c:
b0:f6:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:02 2025 by rpki-client