Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: 1pa0Dx/nn/IW7jDxcGkQpVdWwlY8QTHV0OcpBzG7n+M=
Subject key identifier: 10:3E:C7:94:D2:35:3F:EE:9E:DE:C9:E4:BB:0D:11:D5:67:66:C0:BC
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 019890DA69426BA2D59F7F3ABB9D4774E433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0BCE
Signing time: Sat 09 Aug 2025 22:01:29 +0000
Manifest this update: Sat 09 Aug 2025 22:01:29 +0000
Manifest next update: Sun 10 Aug 2025 22:01:29 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: AfYgN4mwSoUQcwPQzLZisSi5B7POFeQG1XavQVJUbF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:69:42:6b:a2:d5:9f:7f:3a:bb:9d:47:74:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Aug 9 22:01:29 2025 GMT
Not After : Aug 10 22:01:29 2025 GMT
Subject: CN=103ec794d2353fee9edec9e4bb0d11d56766c0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:c6:31:22:91:0f:47:50:49:5c:51:36:b9:
c4:89:49:03:d8:db:56:02:fb:f2:d1:40:aa:49:16:
b8:6e:e9:bc:93:af:6b:34:fa:f3:8c:7c:c6:94:dd:
0e:53:07:a9:ae:cf:fc:e0:49:7d:6a:f9:8b:3e:d6:
c8:69:ca:91:fc:67:8f:03:92:0f:1e:21:06:b2:fd:
a0:2f:3a:44:2d:d9:00:b7:ad:cb:bc:51:20:2f:bf:
27:98:01:06:37:c4:86:5e:b3:de:bd:ab:ab:e9:cd:
0d:19:c4:7a:64:12:63:47:08:a2:a0:db:e0:6b:a3:
19:35:ad:88:d8:f0:33:98:ce:fd:99:c2:10:de:15:
84:7c:71:24:7f:9e:fa:a3:3e:c0:83:fe:8a:9f:6d:
f4:ce:72:59:31:ea:68:92:03:89:e8:97:b8:fe:95:
2e:82:be:c3:3c:14:01:1f:0c:53:77:01:a1:32:db:
85:7f:77:24:4f:8e:f5:79:1c:9c:c7:2b:49:c2:bb:
c8:95:27:ae:e8:a1:e1:dd:23:10:63:fa:47:3e:cf:
70:57:79:e6:29:7a:f6:a8:8a:7d:14:ce:bb:ed:67:
75:5d:1c:e4:3a:9e:21:5c:b5:ce:bc:cd:4d:3d:52:
62:c8:75:d5:17:1b:a1:5a:b4:ab:2e:41:90:50:29:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:C7:94:D2:35:3F:EE:9E:DE:C9:E4:BB:0D:11:D5:67:66:C0:BC
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:24:a4:8d:e9:b0:84:df:84:35:e4:77:ed:bd:b7:12:62:d0:
53:eb:78:88:da:0d:e6:2a:80:ff:a5:96:e1:6f:a2:65:18:58:
b8:65:ff:02:37:ca:3c:54:38:2f:97:5d:69:2b:0a:9f:fb:26:
5f:71:ee:e3:56:76:cc:46:f7:64:45:33:50:d7:37:cc:f3:b1:
ff:74:d7:f5:88:bd:f8:0f:5f:f2:f7:49:2c:3c:fb:3a:b2:39:
df:4f:4a:d8:65:8a:7b:97:9f:16:eb:2d:b5:34:cd:6a:8a:2c:
2a:54:ac:c0:f4:8a:e0:9f:d0:d8:a7:4b:f9:2f:a3:30:8b:0d:
9b:b9:96:f7:92:13:65:cb:bd:0e:b6:42:3a:18:a4:72:f6:1e:
7c:73:0e:95:7e:d6:9f:86:14:91:54:8d:1e:ab:17:3a:44:b5:
b8:7c:66:ed:17:db:36:3f:bf:2e:04:8e:69:40:30:b7:f6:fd:
5c:d0:d1:58:88:69:4f:68:ee:fe:31:50:48:2a:a9:6a:05:8e:
ed:38:f4:2d:d8:ad:54:68:50:fd:e5:7d:32:da:44:90:8c:77:
70:bf:cf:46:a1:18:c3:ee:43:6b:80:53:d1:46:7c:02:13:7c:
82:3a:f6:3d:5c:a8:7c:63:05:32:ef:17:2f:e5:d2:ec:fa:53:
15:9f:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:12 2025 by rpki-client