Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: xBRe7DHy+LbaAAPUdDFMqWIFs3N1Fvrf5AmGnWyXpgk=
Subject key identifier: 39:B3:41:EA:23:7B:BB:AD:1F:65:82:1A:09:60:E5:BA:6C:78:A7:6B
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 01984777A6FFD9BE0B2FAF66C0E5D05451F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 137E
Signing time: Sat 26 Jul 2025 16:01:20 +0000
Manifest this update: Sat 26 Jul 2025 16:01:20 +0000
Manifest next update: Sun 27 Jul 2025 16:01:20 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: I+GkVsdHVkGcXpfDqcj5W9DyNLfqjNMwAIkkJ55WGgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:a6:ff:d9:be:0b:2f:af:66:c0:e5:d0:54:51:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Jul 26 16:01:20 2025 GMT
Not After : Jul 27 16:01:20 2025 GMT
Subject: CN=39b341ea237bbbad1f65821a0960e5ba6c78a76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:63:22:42:95:83:c3:b4:5b:1a:b2:c4:47:
63:d7:80:2c:b7:4a:21:84:a9:a5:0f:8f:d7:4f:67:
53:ad:6c:a2:e4:11:e2:c8:1c:99:55:90:51:8a:b2:
47:37:a8:bf:9d:19:a3:dc:81:b1:23:bb:16:5a:72:
3b:5c:7d:b5:b4:cd:22:8a:b7:6b:dd:ac:70:c1:d9:
05:1b:cc:8b:c8:8a:94:95:97:2a:13:87:a5:27:7a:
c0:c1:5a:3c:51:71:90:7a:97:a7:55:bb:30:2d:15:
0b:97:32:04:38:d4:11:6e:98:eb:f6:76:0b:ab:4a:
1d:89:82:cd:74:9f:d4:2f:3e:b2:c8:df:68:1c:c9:
0a:58:be:70:99:7f:fe:91:8d:ba:ea:fc:ab:a8:5e:
0f:49:cf:b2:2a:ce:8f:7c:00:5f:77:b7:3e:7a:c9:
c4:79:0c:1e:d6:ab:de:fd:01:8c:d5:c1:94:01:49:
84:c1:ad:b5:72:90:2c:4e:c9:63:95:41:10:ca:4d:
f3:76:c2:f5:bd:71:0d:dc:d6:f0:05:09:70:cd:8d:
f9:b6:f0:99:f1:8f:7f:a6:8a:58:3c:75:79:64:d9:
25:89:7c:c5:10:ec:d0:be:bb:bc:80:f3:a5:79:46:
b8:0f:fe:aa:41:90:6d:31:00:1f:e7:51:38:7c:67:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:41:EA:23:7B:BB:AD:1F:65:82:1A:09:60:E5:BA:6C:78:A7:6B
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:89:bd:74:b7:16:d5:fd:81:69:24:df:d7:99:7f:5f:cb:
85:bd:7f:21:7c:2f:a7:b6:5e:3b:37:db:45:44:31:e5:da:7d:
04:f1:25:74:68:5b:f1:ef:e2:94:f1:30:e1:00:4a:eb:01:eb:
02:d9:a8:74:23:4f:76:32:b5:3a:42:19:a2:d3:d0:66:cb:1c:
07:be:86:13:14:58:c8:76:79:1b:68:c5:94:dd:ca:d9:56:d4:
07:3f:14:11:dc:5e:fc:5a:4a:ef:75:8d:e1:97:1c:29:54:5f:
46:c5:06:25:8d:5e:8f:87:da:74:79:0f:92:4f:9a:2c:18:61:
86:f1:2d:c6:46:54:d0:61:6e:28:c3:09:a9:94:87:74:71:c3:
db:bd:20:30:68:79:c9:b5:19:d1:32:c6:04:e5:3b:fd:66:01:
e8:4b:d6:ca:1c:ee:43:bf:84:fd:38:0f:bd:15:37:d7:ec:87:
f3:03:45:94:6f:15:ee:b2:02:b1:b7:64:41:18:17:5d:94:35:
2c:ca:f1:a2:c9:7b:e5:fb:7b:a9:6d:da:df:e1:19:43:de:f1:
87:a4:0d:c8:24:b2:8a:a4:1e:1c:28:f7:8a:30:b5:1a:76:9b:
06:ec:b1:b8:ff:15:b4:3d:46:49:1b:1c:b2:f6:b2:c1:00:03:
52:9a:b6:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd6b/2b4LL69mwOXQVFH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTVmNGEzYTdlYzY0MGM5MjM0NTA3OTk0YzBjNjVmMjhl
MmZjNTkwHhcNMjUwNzI2MTYwMTIwWhcNMjUwNzI3MTYwMTIwWjAzMTEwLwYDVQQD
EygzOWIzNDFlYTIzN2JiYmFkMWY2NTgyMWEwOTYwZTViYTZjNzhhNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklhjIkKVg8O0WxqyxEdj14Ast0oh
hKmlD4/XT2dTrWyi5BHiyByZVZBRirJHN6i/nRmj3IGxI7sWWnI7XH21tM0iirdr
3axwwdkFG8yLyIqUlZcqE4elJ3rAwVo8UXGQepenVbswLRULlzIEONQRbpjr9nYL
q0odiYLNdJ/ULz6yyN9oHMkKWL5wmX/+kY266vyrqF4PSc+yKs6PfABfd7c+esnE
eQwe1qve/QGM1cGUAUmEwa21cpAsTsljlUEQyk3zdsL1vXEN3NbwBQlwzY35tvCZ
8Y9/popYPHV5ZNkliXzFEOzQvru8gPOleUa4D/6qQZBtMQAf51E4fGd52wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmzQeoje7utH2WCGglg5bpseKdrMB8GA1UdIwQY
MBaAFCSl9KOn7GQMkjRQeZTAxl8o4vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUt
YmRkOWI0MzAzYzk2LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUtYmRkOWI0MzAzYzk2
LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAWJvXS3
FtX9gWkk39eZf1/Lhb1/IXwvp7ZeOzfbRUQx5dp9BPEldGhb8e/ilPEw4QBK6wHr
AtmodCNPdjK1OkIZotPQZsscB76GExRYyHZ5G2jFlN3K2VbUBz8UEdxe/FpK73WN
4ZccKVRfRsUGJY1ej4fadHkPkk+aLBhhhvEtxkZU0GFuKMMJqZSHdHHD270gMGh5
ybUZ0TLGBOU7/WYB6EvWyhzuQ7+E/TgPvRU31+yH8wNFlG8V7rICsbdkQRgXXZQ1
LMrxosl75ft7qW3a3+EZQ97xh6QNyCSyiqQeHCj3ijC1GnabBuyxuP8VtD1GSRsc
svaywQADUpq21A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:43 2025 by rpki-client