Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: PtSUKlF+hlwVrKqsBZ4N3Owiw5llAENEY4Y6lATxV8w=
Subject key identifier: DA:4B:8E:E4:96:C9:F3:F7:2A:A5:A5:FA:FF:29:ED:70:C8:3E:66:53
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 01988EEC67BA22802386199B16EE765DCBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 0629
Signing time: Sat 09 Aug 2025 13:01:54 +0000
Manifest this update: Sat 09 Aug 2025 13:01:54 +0000
Manifest next update: Sun 10 Aug 2025 13:01:54 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: 6xukjBfrpua8tVrpGCaS112ns97t7Quqi4S/l62LJjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:67:ba:22:80:23:86:19:9b:16:ee:76:5d:cb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Aug 9 13:01:54 2025 GMT
Not After : Aug 10 13:01:54 2025 GMT
Subject: CN=da4b8ee496c9f3f72aa5a5faff29ed70c83e6653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:85:11:e9:fd:d8:30:dc:b1:8a:07:27:73:
dd:d0:8e:6f:d5:c8:0d:9b:f9:1e:21:20:a2:89:31:
0d:73:df:08:fc:44:56:71:02:32:a6:22:74:55:8a:
47:4c:fc:3e:5c:c0:88:73:e7:4f:6f:b0:c6:7b:c1:
96:2e:2c:e5:da:46:d5:95:4e:c1:7e:4a:8d:7d:6d:
2f:6d:0b:94:ba:f2:46:3a:b4:8a:87:a1:95:d1:64:
e8:77:b0:83:ec:13:10:d7:0f:dd:bd:69:27:95:4d:
3b:6c:be:0f:4f:01:1a:2f:e5:f0:2b:d0:00:ca:fa:
69:84:c9:1f:76:07:07:d2:a6:6e:55:d0:ae:3c:a1:
d4:3a:c6:e4:63:4b:3d:bd:95:77:9c:89:4c:e4:db:
3f:60:8d:aa:ad:75:85:1f:64:e6:00:67:e6:3d:b5:
9c:bf:cf:ea:6e:93:18:1c:88:5b:58:32:04:0f:d9:
44:82:cb:c1:60:e9:d7:eb:75:60:81:ca:58:30:be:
a6:13:b2:44:0b:2b:0e:b2:86:c2:ae:7c:bc:b8:cb:
9d:76:78:2c:3c:2b:b8:a3:18:e8:ca:49:b9:c0:21:
7e:e6:5c:3b:01:c9:e6:b6:84:b1:ec:d2:ed:b5:e7:
9c:6d:78:5f:18:9f:a6:43:e9:3b:db:0b:eb:ab:67:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:8E:E4:96:C9:F3:F7:2A:A5:A5:FA:FF:29:ED:70:C8:3E:66:53
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:20:30:03:47:e1:6a:f3:34:d3:36:b6:bf:55:8c:7f:51:15:
a6:e8:1d:7e:eb:43:dc:85:59:a0:37:aa:fe:22:c9:eb:13:66:
2f:04:b3:a0:0e:5c:fa:26:8d:55:78:97:61:65:69:e4:41:8b:
57:f1:1e:dd:df:b7:9c:f8:f3:17:59:a1:7c:43:d0:aa:ba:a9:
4c:27:1a:a4:9b:97:ef:f8:56:96:12:23:3a:2d:e2:96:9d:61:
92:75:d7:d3:0b:32:c8:fd:20:8f:a4:a8:c9:12:fa:88:f0:e8:
64:0c:9b:14:21:6a:af:5f:4f:7d:2c:3d:2a:22:b3:8b:f1:d4:
f8:aa:09:b5:d2:1c:d5:f9:ac:1a:6a:3b:6c:f6:15:76:14:c8:
93:d8:d0:df:0a:ad:93:31:af:f8:48:de:77:a9:4e:86:a4:da:
04:9a:8b:3d:98:86:c7:41:f0:e6:32:bc:7c:57:f3:fc:54:a1:
b7:30:9f:3a:8a:3a:f6:bb:4d:52:81:31:25:c9:b6:c5:a2:d5:
0d:03:01:08:2c:15:06:37:d7:0b:3a:88:a7:38:79:6c:d3:80:
b3:b4:d4:7b:e7:43:6a:84:15:ed:50:a4:ea:e7:64:96:10:0a:
b9:13:d3:02:51:dc:5d:60:f4:2d:78:4a:b3:bd:2a:e6:6b:c3:
f9:50:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:24 2025 by rpki-client