Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: KODNNEjHI6k9vh+mH9PukFUf3NOlQ31eQbJe+e8nDJQ=
Subject key identifier: 01:7B:9A:05:93:0C:2D:81:50:61:20:68:62:26:F1:65:E5:A8:8E:30
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019873E287C62B87B2D58A8742DB2ED63933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:01:22 +0000
Manifest this update: Mon 04 Aug 2025 07:01:22 +0000
Manifest next update: Tue 05 Aug 2025 07:01:22 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: sTT7XcBj/DDDg522AhLFjAK6YRAJ5toIadTvt93qsrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:87:c6:2b:87:b2:d5:8a:87:42:db:2e:d6:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Aug 4 07:01:22 2025 GMT
Not After : Aug 5 07:01:22 2025 GMT
Subject: CN=017b9a05930c2d81506120686226f165e5a88e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:5a:e2:4f:a1:02:3a:7e:b9:eb:5a:91:05:
32:32:e3:04:a3:56:9f:95:c8:83:1b:64:92:08:c3:
82:96:12:9a:bd:00:b0:2c:59:83:18:a8:d3:81:23:
a2:f7:2c:c7:4d:58:b8:a0:81:fc:1b:cf:0d:27:b7:
a8:54:50:58:33:05:21:bc:2e:80:a0:e2:87:c6:aa:
f2:38:d6:6f:7c:50:e1:df:f6:ed:dd:cb:1e:45:31:
81:0d:d6:2a:63:bf:12:bc:fd:28:46:6b:e3:ec:8d:
18:a8:ce:c8:11:ae:ee:74:b8:17:d4:6e:32:a2:2b:
65:a2:5c:ec:89:10:1c:ce:59:40:9d:89:e6:64:f4:
50:dc:71:a3:1a:a3:8c:0f:7b:62:af:93:1e:34:98:
b9:77:fe:bd:9b:57:41:83:3f:a3:6c:06:e7:40:ca:
e9:81:d7:8c:de:72:f6:63:ef:15:56:75:9f:4e:ee:
d6:ac:ac:40:e2:69:3a:8e:0b:e7:57:f4:40:c9:ab:
e3:9e:b4:00:2a:a0:ca:44:00:7f:0a:0e:9b:6e:8f:
d8:6b:30:79:4e:9b:45:72:f1:06:a1:0c:6c:56:a9:
2c:1f:4c:70:79:2f:5c:ae:e9:6f:ca:f6:2a:b3:c8:
a3:74:7b:f9:ac:22:97:c1:46:69:c8:14:72:03:a8:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7B:9A:05:93:0C:2D:81:50:61:20:68:62:26:F1:65:E5:A8:8E:30
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:be:c9:21:4b:5e:ca:c9:21:3a:aa:ec:10:f9:c7:f4:2e:
64:65:6b:1b:af:1a:7e:9a:c4:83:e2:6d:a9:12:5f:36:85:25:
b1:c7:66:3e:42:98:b0:81:57:cb:02:f6:e1:6a:d4:65:5b:7e:
5a:a1:21:20:d0:67:f2:81:1a:b8:51:2f:ca:1b:2d:e4:f7:f4:
ab:28:4a:64:13:b4:89:7c:ef:f1:47:44:eb:60:8a:b4:4e:e3:
b9:5f:13:a3:1c:f7:83:b6:c3:c7:5f:46:94:ac:ba:49:bb:b0:
5f:2c:80:e2:f9:7a:47:5e:00:f8:cd:95:26:cc:da:9e:28:b0:
68:00:43:8f:e5:15:d1:8a:5d:8d:86:12:a0:6d:09:7d:3a:0d:
5f:b7:64:5e:89:2f:b4:e7:6f:35:7b:81:9c:d4:29:e5:9d:43:
de:5b:21:ef:09:8a:79:4f:11:1b:d5:e7:f1:62:50:ef:2d:8e:
f2:0f:98:e5:8b:e9:30:bb:32:57:33:f0:20:bf:83:b4:53:c1:
cc:66:1e:7f:c0:66:3d:68:c0:c2:a4:4c:19:77:cf:2b:73:e0:
02:02:ad:49:4c:ab:7d:3a:8c:b2:68:dc:19:92:7f:8c:f1:4d:
35:56:ea:25:f3:71:a3:34:7f:35:63:97:50:e4:b3:52:04:ba:
e5:dc:ec:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ofGK4ey1YqHQtsu1jkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5
YTRjNWQwHhcNMjUwODA0MDcwMTIyWhcNMjUwODA1MDcwMTIyWjAzMTEwLwYDVQQD
EygwMTdiOWEwNTkzMGMyZDgxNTA2MTIwNjg2MjI2ZjE2NWU1YTg4ZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj1a4k+hAjp+uetakQUyMuMEo1af
lciDG2SSCMOClhKavQCwLFmDGKjTgSOi9yzHTVi4oIH8G88NJ7eoVFBYMwUhvC6A
oOKHxqryONZvfFDh3/bt3cseRTGBDdYqY78SvP0oRmvj7I0YqM7IEa7udLgX1G4y
oitlolzsiRAczllAnYnmZPRQ3HGjGqOMD3tir5MeNJi5d/69m1dBgz+jbAbnQMrp
gdeM3nL2Y+8VVnWfTu7WrKxA4mk6jgvnV/RAyavjnrQAKqDKRAB/Cg6bbo/YazB5
TptFcvEGoQxsVqksH0xweS9crulvyvYqs8ijdHv5rCKXwUZpyBRyA6iIZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF7mgWTDC2BUGEgaGIm8WXlqI4wMB8GA1UdIwQY
MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct
MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl
LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWK+ySFL
XsrJITqq7BD5x/QuZGVrG68afprEg+JtqRJfNoUlscdmPkKYsIFXywL24WrUZVt+
WqEhINBn8oEauFEvyhst5Pf0qyhKZBO0iXzv8UdE62CKtE7juV8Toxz3g7bDx19G
lKy6SbuwXyyA4vl6R14A+M2VJszaniiwaABDj+UV0YpdjYYSoG0JfToNX7dkXokv
tOdvNXuBnNQp5Z1D3lsh7wmKeU8RG9Xn8WJQ7y2O8g+Y5YvpMLsyVzPwIL+DtFPB
zGYef8BmPWjAwqRMGXfPK3PgAgKtSUyrfTqMsmjcGZJ/jPFNNVbqJfNxozR/NWOX
UOSzUgS65dzsOQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:58 2025 by rpki-client