Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: 8mK3lr01u7VLg5IjLASSuEP1Kg12Dlvik0NRqreiIhY=
Subject key identifier: 35:51:04:35:7E:83:12:D1:9C:2E:07:6D:BB:E1:05:48:E3:A6:61:D5
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 019892C905E1B5D6D6431401AEAEE02FAADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0DFB
Signing time: Sun 10 Aug 2025 07:01:44 +0000
Manifest this update: Sun 10 Aug 2025 07:01:44 +0000
Manifest next update: Mon 11 Aug 2025 07:01:44 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: gu++EcEEE7dHwQBHM2BTkM8vEEqUHcabx6qaqiCJrcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:05:e1:b5:d6:d6:43:14:01:ae:ae:e0:2f:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Aug 10 07:01:44 2025 GMT
Not After : Aug 11 07:01:44 2025 GMT
Subject: CN=355104357e8312d19c2e076dbbe10548e3a661d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:23:02:a8:06:bd:00:f2:1f:0b:fd:32:14:
b4:89:b5:0e:87:21:3a:39:39:05:7e:53:4a:fa:f9:
29:e8:a2:bd:14:f6:61:12:79:d8:78:00:9a:d7:e2:
46:6c:f6:d9:d4:e5:71:3a:8c:04:5f:3b:1a:ac:c8:
b7:b2:69:3b:24:64:b4:b4:00:fd:cf:90:19:b2:a0:
03:99:bc:96:3e:bb:22:52:97:06:48:76:97:e8:8e:
5a:ae:d1:8c:40:60:b2:27:58:ce:71:36:96:bd:82:
40:0a:26:94:0f:3d:50:a6:c8:44:56:13:77:f8:2c:
bb:d5:13:c6:db:3a:82:24:83:f8:60:7f:87:79:b6:
37:53:bc:b4:97:e9:a1:a4:55:48:5d:08:bd:67:48:
8a:45:cc:c7:a6:66:17:90:a0:9c:64:aa:b4:19:24:
dc:dd:85:df:0b:8a:22:28:dc:9e:2f:3c:29:de:ad:
2f:bd:95:02:a7:51:6a:ad:ba:38:b3:16:f3:06:f1:
25:c8:50:b7:23:28:13:f2:6b:b3:22:e5:f6:08:22:
20:8f:00:63:5c:99:fe:53:83:68:50:ee:d3:82:ad:
68:a0:4a:d6:d9:40:51:35:6d:12:6b:0e:5f:9b:d2:
e4:72:5a:6b:fe:ae:f6:d1:a6:a4:1f:9b:36:a4:40:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:04:35:7E:83:12:D1:9C:2E:07:6D:BB:E1:05:48:E3:A6:61:D5
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6c:2d:5f:57:04:6c:64:59:59:e3:5a:8f:9d:0b:79:4e:a1:
5c:69:57:b8:2d:58:7a:ca:94:00:74:95:d5:3f:0b:99:20:ca:
20:3c:50:11:bf:f6:c7:19:ab:7f:fa:7e:77:bc:c6:d4:51:41:
f1:59:62:64:fc:63:65:8f:1b:8c:95:db:9e:db:66:88:a1:22:
79:94:11:31:a7:b7:85:e5:d7:fb:c7:5c:ea:f4:4f:2b:94:ef:
0c:95:4b:1c:1d:a3:77:7f:86:f9:bf:08:1a:6e:67:11:f3:5e:
51:80:08:84:ef:4b:28:c3:c0:f8:83:48:ff:2a:6f:1e:3e:52:
09:f5:24:e1:a7:3a:f9:e9:45:88:32:9c:26:6a:b3:f6:b6:7b:
28:6f:f0:7a:86:77:12:8b:13:25:20:46:99:7e:50:38:bd:74:
d6:ae:e5:5c:48:fb:31:fb:59:06:43:9b:44:9f:a5:32:16:cb:
d2:1e:ea:6c:8e:05:4f:99:3d:b4:39:18:31:bc:58:8a:86:fe:
36:a4:bc:99:bf:ed:b1:a2:00:6c:69:be:17:0b:18:8b:3c:8c:
38:af:bd:30:09:5b:1b:cc:4d:f6:53:8e:b5:94:00:46:36:91:
86:8d:9e:2e:8e:25:e0:b9:15:5e:f4:49:0b:78:28:db:6b:fa:
0c:22:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:57 2025 by rpki-client