Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
File: JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft (raw, json)
Hash identifier: 2iYqRIjZbJKYGQGEU9tlNrkEiswm8u0vcgP0yH36Q5s=
Subject key identifier: BA:29:41:21:07:6F:18:AC:3B:31:CB:19:90:1B:66:6E:7A:CC:0D:8F
Authority key identifier: 26:22:6E:14:1E:81:13:74:21:97:1A:0C:74:5D:60:5A:AC:8A:A6:C8
Certificate issuer: /CN=26226e141e81137421971a0c745d605aac8aa6c8
Certificate serial: 0198737473D40B30659B9DFF1AFD8936F863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
Manifest number: 0C
Signing time: Mon 04 Aug 2025 05:01:08 +0000
Manifest this update: Mon 04 Aug 2025 05:01:08 +0000
Manifest next update: Tue 05 Aug 2025 05:01:08 +0000
Files and hashes: 1: JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl (hash: iM+2tHEGMsFfQqwjr6cJkM9Zu3ZIkz2ozsSJxNuOWHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:73:d4:0b:30:65:9b:9d:ff:1a:fd:89:36:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26226e141e81137421971a0c745d605aac8aa6c8
Validity
Not Before: Aug 4 05:01:08 2025 GMT
Not After : Aug 5 05:01:08 2025 GMT
Subject: CN=ba294121076f18ac3b31cb19901b666e7acc0d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:be:ce:68:48:12:1b:c2:6f:6f:88:6c:3a:
2d:b9:62:92:56:c7:bc:77:ec:0c:3f:de:ac:17:8b:
d5:d0:96:13:d5:34:8a:a4:f4:48:6d:ff:23:26:02:
83:22:69:e8:58:6c:11:c6:b1:4f:39:52:d3:88:3a:
c2:01:47:0b:91:0d:c7:bd:eb:d0:73:bf:6b:d2:c5:
f9:29:1b:cc:a4:a4:1a:f1:e3:3e:1e:5b:e8:9b:48:
23:ce:d3:3e:b9:3a:dc:19:e4:45:cc:80:f7:f2:a3:
47:77:15:c9:95:69:83:f5:26:e7:7f:cf:88:e9:ca:
7d:e9:d0:1c:d0:09:ce:e2:27:5d:f3:ba:04:95:82:
a3:0a:79:40:69:39:96:35:7c:63:04:fa:6d:2f:1e:
85:f6:ae:99:70:1a:72:ae:02:3a:33:69:a6:f2:6b:
be:f2:45:fb:e8:ed:e7:31:f4:74:30:47:18:ff:fa:
23:80:07:43:bb:a4:c3:48:b2:9e:42:09:76:3e:a2:
45:31:44:c7:82:d4:67:38:c0:84:af:90:d5:30:05:
92:da:d1:ad:5f:7d:77:ac:f4:d1:b1:32:5a:5c:e3:
46:de:23:d9:51:5c:65:9b:f0:fc:79:e8:9b:10:b0:
bb:f5:35:98:4e:be:c4:fa:ff:2a:a2:99:89:8f:42:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:41:21:07:6F:18:AC:3B:31:CB:19:90:1B:66:6E:7A:CC:0D:8F
X509v3 Authority Key Identifier:
keyid:26:22:6E:14:1E:81:13:74:21:97:1A:0C:74:5D:60:5A:AC:8A:A6:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2d:96:47:38:88:d9:c2:09:17:03:73:e7:7b:02:2d:47:d9:
0e:9f:2a:ca:06:07:5f:6e:e4:7a:81:ab:81:67:af:09:41:7b:
67:74:1f:ac:05:ba:d9:c3:f1:7b:16:83:66:1c:f7:0d:83:c6:
c6:93:ed:6f:64:d5:d2:1e:f0:2e:e1:73:d6:8d:95:d4:23:45:
86:4d:43:c1:d0:38:ab:5d:55:3c:01:b1:93:11:77:8b:0f:6c:
d2:f1:a4:be:b0:4f:ad:73:6c:46:93:ec:cc:b7:cc:77:05:66:
95:d8:d0:49:57:0a:ab:dc:ea:92:9d:8e:6f:c9:54:8c:47:59:
ff:2a:b1:85:76:17:c8:65:6d:4e:9f:b4:03:9b:ce:06:4c:07:
45:6e:6c:5b:81:2d:91:04:07:fa:c7:a3:f2:69:ea:1a:77:2a:
4f:a0:d9:81:15:eb:42:b0:21:d7:54:b2:ab:42:40:a8:ef:9b:
11:0e:97:13:97:20:e5:5c:fd:61:c6:2a:f1:f9:97:fd:df:b7:
c5:b0:43:04:54:09:20:01:ea:12:38:de:4d:ab:34:9c:10:b2:
9b:32:a5:a8:e0:02:37:e2:df:09:8d:4a:93:f8:41:6f:9f:4c:
5e:60:a5:0a:f8:3e:21:0b:9b:39:2e:67:db:d4:14:21:d0:ee:
00:80:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:28 2025 by rpki-client