
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File: jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier: Gt5xa4GI/368/28y0t4+FEdgYCCJfsAvgCo3Hin11uk=
Subject key identifier: 66:2B:91:6F:0B:C4:CE:4E:3E:F6:1D:B5:FC:3C:BB:2D:D6:69:4C:E1
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer: /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial: 0198898DCE851C35B50F731C87E417700E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number: 126B
Signing time: Fri 08 Aug 2025 12:00:28 +0000
Manifest this update: Fri 08 Aug 2025 12:00:28 +0000
Manifest next update: Sat 09 Aug 2025 12:00:28 +0000
Files and hashes: 1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: srJe/CnBbluye8qb8JOlZJ1Zb2ZYyAI4KdyPCU8KpS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8d:ce:85:1c:35:b5:0f:73:1c:87:e4:17:70:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Validity
Not Before: Aug 8 12:00:28 2025 GMT
Not After : Aug 9 12:00:28 2025 GMT
Subject: CN=662b916f0bc4ce4e3ef61db5fc3cbb2dd6694ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:98:25:72:ad:73:25:22:20:70:47:4d:9d:
9c:00:2e:53:d8:d2:da:40:91:fe:ec:68:3c:f0:d0:
06:39:3c:dc:2d:b6:b3:87:77:d0:8c:98:98:96:d8:
f8:10:af:a4:b8:2f:24:0b:05:3c:b3:aa:81:28:61:
5b:db:f9:ff:41:d7:9b:b5:bc:26:8f:c0:c5:94:0e:
8c:e4:2b:9e:c6:ad:b3:59:44:44:f7:57:cc:6d:53:
17:f7:83:a5:8e:a1:23:84:cd:93:0a:a0:16:1f:6b:
22:64:68:3c:37:00:1b:d8:c0:8a:ac:94:18:b5:e2:
23:f7:21:e3:f7:c3:e2:04:2e:80:61:47:b9:c9:25:
42:84:f8:65:2b:9f:9c:e3:52:a1:75:e9:68:cd:a2:
5f:91:19:db:b5:b2:3b:a3:1f:36:66:18:64:e6:66:
f9:f9:57:37:23:22:ca:0f:f7:20:eb:d2:e0:70:31:
e6:bf:61:21:34:de:6d:26:44:08:ca:5c:6a:92:c3:
26:85:eb:33:c2:62:4c:c6:65:d9:ce:e3:ed:a3:51:
62:72:74:6e:b8:ed:36:e6:7b:63:da:56:15:5d:bf:
28:b8:d1:f3:95:83:f3:05:f6:50:1e:1c:66:c8:c2:
f9:79:16:48:ea:91:2a:5f:e0:ea:d1:83:d8:4d:a8:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:91:6F:0B:C4:CE:4E:3E:F6:1D:B5:FC:3C:BB:2D:D6:69:4C:E1
X509v3 Authority Key Identifier:
keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:41:39:51:00:99:e5:0d:d8:e1:63:f9:30:56:a2:50:9d:63:
5a:af:00:8d:46:35:61:90:49:32:a2:16:c4:0d:86:ae:b1:c4:
82:c9:b3:d8:f5:01:8f:d7:b2:74:6a:2d:fb:40:65:6c:88:28:
4d:61:61:ad:bb:c1:60:95:41:f6:5b:c4:1e:08:f3:a1:9e:93:
fc:78:60:fb:48:a6:e9:09:62:52:f1:5d:23:94:81:b0:c9:33:
5f:c1:15:cf:fc:42:9d:2f:40:b2:74:e2:e6:e0:91:14:9b:19:
39:26:1b:19:75:1e:b1:f5:7b:19:10:6f:c9:74:4d:41:82:89:
4f:c3:c1:71:47:24:b3:0c:23:4e:0d:e3:47:1c:25:ee:5d:36:
74:d2:f3:79:f9:3e:92:9e:2c:75:8c:44:70:49:ee:33:ab:ed:
68:95:05:a5:cf:41:29:b6:23:14:d8:5d:f4:bf:74:57:3a:2b:
3a:13:3e:22:1c:af:37:bb:41:06:04:db:43:39:c1:27:76:1b:
d8:04:29:a4:e7:1f:54:3a:60:81:5b:99:3b:44:98:a8:94:4e:
aa:f3:c3:9a:f7:18:72:28:65:1e:fb:7e:81:b4:34:90:b3:11:
bb:6f:80:17:ad:1d:f4:96:cb:3f:11:fd:dc:eb:18:a8:62:50:
33:fc:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:23 2025 by rpki-client