Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: dvLM4bc0CgfPiG5cIFk2fNVfSnuH+DSYDu/eG08yz6k=
Subject key identifier: A8:43:B6:DE:5A:EA:DE:A9:C9:01:65:8B:95:73:8B:3E:0B:37:0A:36
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 019896A5AAB208D5DDBD21BD2995960211E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1368
Signing time: Mon 11 Aug 2025 01:01:36 +0000
Manifest this update: Mon 11 Aug 2025 01:01:36 +0000
Manifest next update: Tue 12 Aug 2025 01:01:36 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: 17dzjO46R9fi4TUDeGKxfEpZhRJwdFavdYRXPuJrI68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:aa:b2:08:d5:dd:bd:21:bd:29:95:96:02:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Aug 11 01:01:36 2025 GMT
Not After : Aug 12 01:01:36 2025 GMT
Subject: CN=a843b6de5aeadea9c901658b95738b3e0b370a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:db:51:3d:c4:4c:b4:d8:10:20:7c:b6:88:
89:26:9c:be:c6:e6:97:26:6d:0c:50:6c:99:85:99:
3a:b1:e3:62:a2:cd:36:04:11:af:aa:78:87:15:2c:
45:fe:0f:d1:3e:1a:45:81:db:02:91:6b:da:a6:65:
59:e6:92:09:ac:fc:b8:09:87:59:c0:c4:15:58:59:
34:bd:90:b2:9e:c3:95:5e:2c:b7:bd:a1:73:93:b8:
6b:bc:03:c2:1d:10:1f:34:c6:4e:36:81:37:b7:72:
5b:fd:37:84:3f:b9:93:51:5e:26:9d:d6:a8:53:ae:
24:13:5d:80:dc:6b:2a:85:47:34:5a:7c:b8:72:71:
29:1d:5d:f6:05:80:12:c2:67:2f:14:d5:73:4d:8d:
fa:f6:e7:8d:05:13:c3:c8:f5:b5:05:87:39:48:fc:
c8:1b:c5:ca:4e:c2:59:21:74:e7:45:c1:bd:4d:ce:
25:19:2a:33:2d:4b:ec:7c:fa:47:7a:8e:f3:e8:9b:
52:ce:67:ac:80:9b:88:f9:6a:a4:c5:3b:65:a5:7e:
21:1f:17:f2:3c:66:b5:2d:0a:0b:5a:e0:18:0f:d1:
b9:39:bf:36:5d:ba:70:07:21:0e:8f:a5:96:e5:ac:
a4:b3:a8:84:45:98:17:70:ea:47:58:c6:af:b3:2e:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:B6:DE:5A:EA:DE:A9:C9:01:65:8B:95:73:8B:3E:0B:37:0A:36
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:79:95:cf:5b:89:4c:98:1a:fe:00:94:a9:06:d8:13:91:
2d:f5:29:72:8f:a9:1f:02:f3:35:27:d0:4c:3c:dd:ed:d9:99:
9d:9b:49:ae:e3:6a:fb:9b:c9:ad:15:04:ba:3f:de:6c:8b:fe:
d2:e6:c8:50:10:fe:fc:7e:9e:b9:49:a3:46:39:14:17:d4:a9:
69:f7:49:a2:7f:a2:af:5d:58:a2:74:40:9f:95:de:3b:ce:8f:
32:9c:0c:34:0f:e6:d1:ba:96:07:4c:68:7c:d7:0d:ad:10:9e:
13:b3:1b:f5:ac:4e:02:01:77:dc:5b:d8:30:eb:65:b6:83:b4:
ce:4e:33:43:22:eb:39:7f:e8:10:53:00:db:ed:5c:93:0a:db:
75:50:cb:09:70:3b:5c:3e:b1:f0:fc:42:c1:09:80:96:5a:25:
6a:80:10:68:c0:6f:58:20:b8:35:3b:dc:ef:14:af:36:8e:6b:
84:8a:16:5b:e7:41:a1:18:ca:e5:a5:9c:f8:be:c3:92:9f:a6:
92:d7:53:61:ff:71:74:13:be:b0:72:3d:d1:32:18:00:6b:2a:
a5:b7:73:cf:c6:ce:fa:47:97:39:57:6a:5d:1c:7b:0b:04:ce:
59:87:6c:40:a3:ed:63:a3:be:42:ec:f8:fd:9e:95:2a:22:6c:
c2:36:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:16 2025 by rpki-client