Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: aP8XSv89f8xMMEz9+RAbZvbIz5wWcKuRaoyUEbCsf7g=
Subject key identifier: 49:1B:50:EA:76:CC:94:FB:01:05:69:77:38:41:83:4C:DC:BD:60:01
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019778D4E30F295F144444BEBDD91C06A906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 1592
Signing time: Mon 16 Jun 2025 13:01:46 +0000
Manifest this update: Mon 16 Jun 2025 13:01:46 +0000
Manifest next update: Tue 17 Jun 2025 13:01:46 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: bEVO4bHUBtIdYCTyPB8aAOzq8V2M/shHOVi0O0sfP4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:e3:0f:29:5f:14:44:44:be:bd:d9:1c:06:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Jun 16 13:01:46 2025 GMT
Not After : Jun 17 13:01:46 2025 GMT
Subject: CN=491b50ea76cc94fb010569773841834cdcbd6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:fe:d1:1b:f0:cc:fd:f5:ea:a8:13:1e:1f:
0e:5f:3f:4b:0b:20:3e:1a:85:ed:4e:9f:40:3d:6d:
a5:da:b2:d4:ff:92:22:77:51:ed:9f:81:e9:13:a8:
17:c0:fb:d0:75:66:dc:d9:9a:32:05:f5:d8:51:ec:
ee:1b:6d:86:7c:e3:0b:7a:96:08:fb:72:72:28:68:
2b:8a:bf:3b:e4:eb:36:8e:c1:85:5d:b9:2c:6e:e9:
d1:65:58:3e:ee:b9:fc:fd:9e:91:08:5b:a9:71:07:
f6:1e:79:1d:b4:e3:14:af:94:9b:96:78:3b:5e:6b:
60:cf:c1:a5:85:8d:a8:e3:b6:fb:06:d8:5b:a0:bf:
73:ab:5b:5a:67:be:09:c7:5f:d9:da:96:f0:5b:ed:
21:7f:06:c8:24:ea:fd:39:02:27:57:e2:7d:39:b8:
6d:19:34:cd:b3:53:75:e2:34:0c:e1:ec:74:52:5e:
84:8e:ec:f2:fb:bb:0a:d7:9f:c6:cf:1d:96:c1:8b:
04:ef:88:70:53:02:9b:51:07:80:12:48:d6:71:1a:
cf:53:e4:1e:6a:c3:25:e2:fe:d7:1f:5a:73:9e:8b:
95:eb:5f:97:c1:53:d0:54:25:65:88:56:72:e3:c0:
3f:c1:ea:da:2f:b5:f7:03:7f:90:56:62:85:7f:22:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:50:EA:76:CC:94:FB:01:05:69:77:38:41:83:4C:DC:BD:60:01
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:5d:44:2b:4e:11:c3:f7:82:9d:0a:9e:fc:dd:7e:c7:dc:
42:4b:c1:82:ad:b1:62:e6:90:47:37:ac:e2:9d:e9:e0:59:5c:
02:04:8e:96:5c:fd:85:ba:28:84:74:f3:72:01:3c:35:a6:a0:
26:8f:d6:17:fa:39:26:e9:ca:80:57:66:c7:4b:5e:18:d7:dc:
a0:30:31:27:6e:91:0e:9c:d9:35:a2:d2:94:4e:56:a4:31:4d:
5c:4c:02:e2:13:fe:72:4f:8c:db:7f:06:89:06:2d:77:2d:8b:
33:28:ef:49:3c:74:8a:00:ed:65:07:71:70:6d:95:c1:a4:32:
d4:1e:37:cf:a1:1c:ec:34:8e:47:80:73:b6:d7:8f:18:97:e8:
d2:fc:a2:56:1f:72:29:0e:7e:5c:cc:d0:6d:58:6b:05:c8:9c:
13:cc:5d:7f:3f:18:bb:88:96:94:1b:c1:13:2d:1d:5d:e1:45:
dd:ee:4e:49:c0:a5:79:bb:b0:26:33:62:71:2c:24:97:45:16:
06:eb:97:71:1c:19:46:26:d8:02:fa:0c:c1:03:bf:72:3e:36:
7b:10:a1:b9:91:e9:b2:24:60:46:ec:92:2d:4c:7a:86:78:f4:
52:dd:28:2b:74:65:56:1d:7b:fc:ec:64:94:a5:2f:fe:aa:b6:
ab:f8:46:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:42:47 2025 by rpki-client