Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: x41Q8AaDMTOaSH53BZEVrIy5xq2UxplFtGOby5d0NeM=
Subject key identifier: 0F:81:68:53:EE:63:FC:A7:EE:F1:BD:AC:DC:C7:C1:F7:14:84:D4:56
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019873E25B0238528E7837004D75B85C6CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0730
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: E6L4TfWrczr/BPmawuzyMDoOV6PEHs43Y7swOh6GTSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5b:02:38:52:8e:78:37:00:4d:75:b8:5c:6c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=0f816853ee63fca7eef1bdacdcc7c1f71484d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:38:d0:c2:40:90:77:c7:fa:7e:ab:4e:7a:
3f:f2:e6:e9:bc:bf:49:d1:ba:74:46:69:bd:01:6f:
07:08:3e:7b:72:03:be:c1:0d:70:d0:62:db:13:34:
50:9f:2e:c7:52:2c:0f:7d:9c:58:2b:07:ed:22:f8:
5c:7a:f5:63:5c:91:c2:63:a4:09:98:bf:39:f8:75:
c8:09:0d:9a:88:36:4f:2c:e0:05:6c:b5:69:7c:3a:
b7:08:a2:35:f2:7e:09:72:23:63:9c:18:c0:75:87:
33:c2:61:85:e5:ca:52:86:49:a3:9a:75:3f:a5:8d:
9d:33:d8:f8:a9:d8:0c:5a:b8:5f:ea:5e:85:5d:30:
40:fb:56:17:7b:18:1f:c0:ad:83:e3:c7:d8:e6:0c:
50:b2:b5:1c:08:d1:45:9d:2a:20:37:b9:30:80:1b:
bc:08:63:d2:69:21:58:3c:fb:9c:c9:87:50:c4:2c:
63:ff:50:ed:1a:47:8d:46:82:a3:4f:2f:29:8e:ce:
4e:61:1a:c5:4a:fd:bc:5e:a5:60:a5:17:08:c8:3b:
57:1a:ce:cd:a5:a7:2c:41:32:a0:77:af:50:5e:10:
a6:fb:63:b8:f6:c1:6c:17:3d:0d:8e:cc:db:3c:54:
e3:78:35:95:0b:1c:67:97:12:6e:0a:1c:b6:d1:da:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:68:53:EE:63:FC:A7:EE:F1:BD:AC:DC:C7:C1:F7:14:84:D4:56
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:d6:7e:df:62:3b:42:73:dd:42:58:39:47:e6:ba:4e:d4:
65:71:e1:32:74:2e:08:d0:6a:2b:7e:90:e2:89:57:b5:9c:d0:
19:ee:9a:1a:61:88:fd:47:54:37:38:52:e4:24:20:80:68:09:
2c:09:18:b2:94:48:5f:28:28:0a:cc:d6:62:b9:f8:f9:0e:0b:
6a:7a:0b:9b:65:1e:e5:46:39:15:67:ef:8f:99:e1:d4:51:b6:
4a:9b:85:eb:25:12:b6:d4:b8:13:ea:3c:59:74:5f:63:6a:ab:
3e:bc:4c:5b:28:58:80:a7:59:f9:73:c3:eb:76:ca:6a:6d:f1:
4a:e6:51:fe:64:b8:42:d7:f3:c6:36:53:5a:f3:be:47:99:39:
97:64:f2:54:1d:c3:3e:cf:5c:32:b6:d0:35:98:36:d8:05:f8:
53:49:fa:d7:63:35:9f:0a:3c:68:37:ff:2c:46:27:06:26:4a:
22:e3:fd:18:c8:9b:1b:fb:74:cb:9e:f9:dc:a5:45:bd:af:2b:
74:3d:c0:02:f1:f7:4f:d3:52:9c:a6:04:93:87:6a:3f:ff:ad:
8c:81:81:ab:3e:6d:db:de:24:99:ab:46:3d:50:50:21:86:9d:
73:e7:04:03:b0:e8:bc:cb:f6:28:dc:99:da:06:df:96:0e:91:
6a:bd:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:05 2025 by rpki-client