Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: 3VT65+uQIiKcXYF7xa04qI1mU7gr4RVZCnU7eeP+X54=
Subject key identifier: 57:24:F9:EA:F0:F5:E1:44:D8:EA:50:9E:60:5A:4C:5C:B1:BF:C1:0D
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 0198A04DDAC995D1EC76FF20FA5F567A58ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 13AC
Signing time: Tue 12 Aug 2025 22:01:53 +0000
Manifest this update: Tue 12 Aug 2025 22:01:53 +0000
Manifest next update: Wed 13 Aug 2025 22:01:53 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: ijPypz+Q5/mMZL3kzqjbXbfaA5P8n9jp2XGW2jLgjnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:da:c9:95:d1:ec:76:ff:20:fa:5f:56:7a:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Aug 12 22:01:53 2025 GMT
Not After : Aug 13 22:01:53 2025 GMT
Subject: CN=5724f9eaf0f5e144d8ea509e605a4c5cb1bfc10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:55:83:0b:cb:04:b6:23:15:15:da:f3:71:
ff:15:80:b2:5f:2a:fc:da:86:d4:86:6c:c7:b3:0c:
8e:0d:6f:70:5f:41:92:4c:e6:24:75:bf:7e:66:be:
33:03:5a:5b:89:f6:f4:73:fc:66:0e:50:0e:14:3d:
0c:05:fe:25:b0:c0:07:3c:c3:5c:3b:ec:9e:34:9e:
8d:0a:36:2b:a8:02:40:35:76:b9:14:02:c6:cd:dc:
d8:5c:62:68:bb:3a:6c:fc:1c:44:99:a2:04:44:48:
7b:b3:60:08:45:6e:da:82:35:88:43:35:b3:e2:f9:
d3:b8:6e:80:b1:07:85:a7:78:e9:7e:ec:ef:6d:fd:
85:ba:f7:d9:39:27:40:ff:f8:d1:59:9b:bb:c7:5b:
99:70:45:8c:55:47:b0:89:b9:d7:7c:14:d4:dd:8b:
5f:2b:cc:ec:66:80:55:34:d3:89:78:52:fe:01:a5:
c8:6f:ea:ec:10:54:1b:c4:25:66:df:b2:50:dc:33:
77:30:93:f1:d5:3f:8d:6f:80:b2:be:af:82:2a:57:
4f:af:a4:57:61:82:0d:8e:41:1c:e3:ea:cd:b3:ee:
96:06:ad:60:df:5f:4f:1a:51:c9:00:99:c0:9d:fb:
a6:4b:62:02:0a:81:bf:99:76:ff:e1:36:5e:db:3d:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:24:F9:EA:F0:F5:E1:44:D8:EA:50:9E:60:5A:4C:5C:B1:BF:C1:0D
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:eb:f8:80:e8:53:60:ce:15:a4:dd:dd:dc:95:e6:8d:0f:ff:
2c:c5:ae:cc:89:10:d3:e8:d5:7a:59:42:f7:95:f9:66:8d:ff:
74:3f:dc:72:85:dd:9b:83:2f:28:87:7f:f8:30:fd:b9:64:fd:
80:8f:b1:91:2c:e2:af:a2:bc:4e:2b:7a:c4:f4:e7:4b:6e:cb:
7b:79:16:58:de:16:04:5b:8d:a4:f7:89:05:a9:a7:f9:f7:d1:
a5:4d:dd:51:7a:f9:cc:2b:e7:53:a3:9b:4b:cb:06:39:d8:25:
44:37:c1:7d:31:33:6e:c8:81:bb:1d:6b:49:d9:23:be:51:ac:
c5:0d:a2:6e:3f:7c:e9:3c:03:cb:ea:8e:c5:27:8f:a1:cb:b6:
b4:d5:dd:49:4c:80:34:22:81:2c:f4:5f:7a:7a:12:43:b2:91:
be:2b:76:00:e7:05:0f:3f:4d:d9:00:1b:cc:bd:c0:2a:96:24:
5b:3e:63:73:a7:38:fd:e9:a8:ed:7d:c8:1b:59:4f:1d:32:40:
44:87:fd:ca:15:bc:eb:8a:31:a3:f8:21:28:33:4b:59:8f:6e:
cb:49:61:fd:cc:98:3b:4e:3b:f2:5d:cc:e2:f6:d6:9c:c3:4b:
b7:56:ed:41:21:d4:b8:c5:b6:9d:bd:7d:dc:9c:85:d8:c8:8b:
19:49:a6:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTdrJldHsdv8g+l9WeljtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTVmNGEzYTdlYzY0MGM5MjM0NTA3OTk0YzBjNjVmMjhl
MmZjNTkwHhcNMjUwODEyMjIwMTUzWhcNMjUwODEzMjIwMTUzWjAzMTEwLwYDVQQD
Eyg1NzI0ZjllYWYwZjVlMTQ0ZDhlYTUwOWU2MDVhNGM1Y2IxYmZjMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5dVgwvLBLYjFRXa83H/FYCyXyr8
2obUhmzHswyODW9wX0GSTOYkdb9+Zr4zA1pbifb0c/xmDlAOFD0MBf4lsMAHPMNc
O+yeNJ6NCjYrqAJANXa5FALGzdzYXGJouzps/BxEmaIEREh7s2AIRW7agjWIQzWz
4vnTuG6AsQeFp3jpfuzvbf2FuvfZOSdA//jRWZu7x1uZcEWMVUewibnXfBTU3Ytf
K8zsZoBVNNOJeFL+AaXIb+rsEFQbxCVm37JQ3DN3MJPx1T+Nb4Cyvq+CKldPr6RX
YYINjkEc4+rNs+6WBq1g319PGlHJAJnAnfumS2ICCoG/mXb/4TZe2z1wRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFck+erw9eFE2OpQnmBaTFyxv8ENMB8GA1UdIwQY
MBaAFCSl9KOn7GQMkjRQeZTAxl8o4vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUt
YmRkOWI0MzAzYzk2LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUtYmRkOWI0MzAzYzk2
LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuv4gOhT
YM4VpN3d3JXmjQ//LMWuzIkQ0+jVellC95X5Zo3/dD/ccoXdm4MvKId/+DD9uWT9
gI+xkSzir6K8Tit6xPTnS27Le3kWWN4WBFuNpPeJBamn+ffRpU3dUXr5zCvnU6Ob
S8sGOdglRDfBfTEzbsiBux1rSdkjvlGsxQ2ibj986TwDy+qOxSePocu2tNXdSUyA
NCKBLPRfenoSQ7KRvit2AOcFDz9N2QAbzL3AKpYkWz5jc6c4/emo7X3IG1lPHTJA
RIf9yhW864oxo/ghKDNLWY9uy0lh/cyYO0478l3M4vbWnMNLt1btQSHUuMW2nb19
3JyF2MiLGUmmQw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:08 2025 by rpki-client