Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File: jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier: bDympStmzMrfjPyfOt2CVFH4mCPoaJgg39jNQiW9qyo=
Subject key identifier: E4:7F:0A:9B:6B:00:24:D4:EB:85:7B:91:30:17:7C:77:42:97:E5:AC
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 019896A4CCE7C7D57154C08C9040290A93D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 01:00:39 +0000
Manifest this update: Mon 11 Aug 2025 01:00:39 +0000
Manifest next update: Tue 12 Aug 2025 01:00:39 +0000
Files and hashes: 1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: EiSkYdDJCtImiuS2Ff9z5cre22KPJO/XM4w7GNR0a+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:cc:e7:c7:d5:71:54:c0:8c:90:40:29:0a:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: Aug 11 01:00:39 2025 GMT
Not After : Aug 12 01:00:39 2025 GMT
Subject: CN=e47f0a9b6b0024d4eb857b9130177c774297e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:0d:93:78:b2:2e:49:ec:7a:69:ba:2b:04:
53:c6:1d:8d:f0:58:d6:d7:d9:d8:77:f8:92:b6:bb:
b2:9a:57:97:7f:d0:24:c5:ea:37:b6:a3:1b:52:99:
51:45:45:a4:1a:4f:28:86:0e:bb:a9:cf:ea:46:12:
34:01:3d:4e:26:cd:79:68:56:ec:a1:4f:63:08:73:
ac:7a:76:0d:74:4d:17:34:d4:45:02:5a:8c:ff:95:
d3:c2:34:90:23:67:bc:74:1f:98:1e:01:90:1f:17:
b9:e0:28:76:0c:10:ef:90:8f:8a:0d:ee:6d:69:2b:
d2:49:2d:b2:b2:d6:9c:a1:9d:63:7b:99:96:b9:fd:
5f:dc:6a:92:67:05:4a:34:53:03:d2:00:94:20:23:
52:79:dc:2f:8e:a0:04:a5:10:86:71:b5:20:32:36:
15:5f:a7:4b:d7:fd:77:63:80:da:63:83:18:3c:5f:
a9:71:a6:af:75:89:e9:1b:0b:df:d1:88:9f:db:35:
94:a3:42:52:cb:b5:11:6f:43:63:fd:d5:de:14:52:
3f:6e:d5:a5:84:08:5c:f1:84:45:2f:a0:53:5f:71:
9c:33:02:83:5e:e5:ab:76:76:e4:2b:07:0d:e5:0a:
d7:6b:81:69:45:38:68:22:f9:ff:b7:fb:5f:cd:8b:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:0A:9B:6B:00:24:D4:EB:85:7B:91:30:17:7C:77:42:97:E5:AC
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:cc:84:a0:c3:31:89:e7:96:20:60:88:8a:e4:ee:16:86:
13:3a:6d:43:fd:dd:54:10:e6:5f:5c:f9:08:c4:06:6b:42:95:
c6:04:2b:67:f3:a8:bf:0c:7a:2a:e6:38:cd:d3:17:0a:a2:3a:
25:14:41:09:43:9b:cb:15:b7:c2:f6:80:1f:2a:99:76:20:a1:
2a:fc:d5:51:3d:9b:6d:8d:aa:21:fc:73:89:5a:ed:fe:c7:b6:
16:c5:76:36:65:22:27:51:14:ca:6e:a0:26:a1:31:75:48:ef:
da:42:17:98:45:4a:c7:db:88:a3:da:f1:70:61:af:01:31:1a:
51:8c:a9:14:ab:c2:ca:83:90:a8:0f:30:1d:e2:dc:fb:1f:52:
38:4f:e8:79:29:f7:26:0a:9a:9f:d7:dd:07:e5:65:72:3d:1a:
f7:66:92:d5:b8:b9:97:15:97:d3:b4:48:62:fb:26:d4:a8:0b:
2c:53:7d:26:cd:96:35:c0:c2:08:31:ea:aa:76:d2:f6:2a:fb:
b8:85:c3:e3:c9:a7:b9:1f:02:e4:fa:a9:83:32:bf:86:a4:18:
54:58:f5:c9:c6:e9:bd:41:36:95:b7:65:29:da:db:8e:e2:0f:
0a:5f:6e:0a:91:38:d3:91:17:04:47:35:53:ed:3d:42:5b:c2:
96:83:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:30 2025 by rpki-client