Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: ITeUvd8TEpsahl2ZHLtPDIWtPBFrY5dLdMx+OhSrc4I=
Subject key identifier: 4D:74:06:6D:B7:59:05:28:30:C6:4F:B4:E1:01:ED:B7:34:54:D8:86
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 01988242D409809CA45F3A40636297BAADCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 0788
Signing time: Thu 07 Aug 2025 02:01:14 +0000
Manifest this update: Thu 07 Aug 2025 02:01:14 +0000
Manifest next update: Fri 08 Aug 2025 02:01:14 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: 2GHdYncJbc+a/amozaIZU5JhgoqxvhGnaxk9F4AMgus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:d4:09:80:9c:a4:5f:3a:40:63:62:97:ba:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Aug 7 02:01:14 2025 GMT
Not After : Aug 8 02:01:14 2025 GMT
Subject: CN=4d74066db759052830c64fb4e101edb73454d886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:a7:d1:9c:d9:21:14:d3:bb:76:4d:c7:67:
7f:93:3a:4c:5d:2a:c5:54:42:2a:59:a0:68:be:63:
36:42:8e:73:b2:ee:7c:c9:7e:a2:5d:1e:64:e7:46:
1e:03:be:60:67:92:ce:71:dc:fa:01:f8:5a:78:1c:
4f:5d:0a:51:a7:8b:f0:61:66:af:cd:20:67:6b:65:
8f:10:e0:3d:36:9c:cd:6a:67:34:db:cc:60:75:a6:
91:be:3f:09:4d:ca:6c:91:0e:06:0d:f1:04:60:75:
4d:84:13:1b:93:04:7e:08:5d:c5:f3:16:da:a2:26:
3e:aa:d4:7c:1e:ea:f1:29:90:e6:58:5c:fe:b3:c8:
39:2f:38:3d:d3:0b:7a:5a:8e:f3:25:09:26:dc:d0:
bb:d9:bf:4e:68:32:83:f7:c4:aa:ce:ba:9a:eb:de:
50:66:60:92:0d:1b:bd:09:a1:02:07:3e:86:b9:dd:
c2:7e:34:1e:9b:31:e4:85:ce:fc:af:18:ea:a4:eb:
72:c4:d8:49:a1:c7:74:6b:55:d0:40:f6:8a:31:b8:
b6:83:0a:81:fa:95:8d:26:56:33:01:55:16:2b:ab:
49:1f:29:4e:ad:29:8b:dd:15:52:e9:5a:12:94:a6:
a8:89:b6:78:81:c3:dc:98:4c:9c:43:d5:0c:b1:85:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:06:6D:B7:59:05:28:30:C6:4F:B4:E1:01:ED:B7:34:54:D8:86
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:47:d4:77:10:8b:24:8a:36:a5:30:3c:8e:e0:f9:9e:92:
90:39:89:75:96:46:cc:f6:9c:29:e0:f3:a5:19:e3:63:54:7b:
5f:a5:66:28:5c:da:52:24:a7:8f:6b:d2:0b:32:92:db:d9:7b:
60:12:4c:76:e5:b7:39:ca:76:81:a0:b9:1a:a6:f8:27:07:ec:
3f:32:01:b3:15:1f:d8:b2:47:63:19:52:4a:af:3c:2d:a4:ce:
2e:92:11:b8:a9:65:ed:c5:fa:72:26:40:34:46:d3:51:18:ee:
32:99:c6:24:dd:89:d3:2c:3f:24:7f:43:a8:5d:21:b5:32:42:
70:dd:e3:11:bc:6c:ce:07:a0:64:6e:ad:26:24:2a:55:31:7d:
a3:57:19:40:f1:6f:56:f6:be:f3:f3:91:57:08:bd:3c:cd:81:
49:3b:23:f3:a0:cd:0f:d9:c2:de:24:04:57:e7:09:06:a7:69:
59:4d:19:bc:7c:00:a5:26:57:6a:cb:f2:db:20:c7:1a:3d:1e:
c2:0e:b1:fa:c0:a2:a8:ce:0a:d4:63:9a:a9:74:a9:7a:e9:f8:
7e:54:86:c2:a8:c6:76:38:ff:a5:e0:87:dc:c7:86:ff:d1:6f:
2e:06:10:31:f3:37:02:13:1e:45:cb:fc:77:48:13:9d:0d:36:
98:77:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:24 2025 by rpki-client