Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: FoBQpzFzkAjzoZIdVQQMODH80wR/yvTD6ne8Y1rxzRw=
Subject key identifier: FC:7B:63:8C:AD:EF:E7:B8:52:F8:83:FE:91:03:07:D8:A4:00:97:4E
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 01987486D5ACF6B36B242166A139D90DAE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0231
Signing time: Mon 04 Aug 2025 10:00:50 +0000
Manifest this update: Mon 04 Aug 2025 10:00:50 +0000
Manifest next update: Tue 05 Aug 2025 10:00:50 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: iyNSP5E8/u4/i2Rthn7kNwnRFJbOPgRc0roaeZxqvE4=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:d5:ac:f6:b3:6b:24:21:66:a1:39:d9:0d:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Aug 4 10:00:50 2025 GMT
Not After : Aug 5 10:00:50 2025 GMT
Subject: CN=fc7b638cadefe7b852f883fe910307d8a400974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:51:56:ef:63:24:da:05:e6:56:dd:54:6c:
a4:0b:c9:62:88:47:79:0b:92:8b:20:5b:de:6a:39:
56:02:f7:48:47:0c:a5:6a:c1:73:32:ea:64:0d:fd:
01:f6:70:3d:fa:64:a5:fd:2e:df:bb:ee:49:af:64:
f3:ff:45:33:7e:08:d1:f0:44:31:61:fd:e8:86:58:
40:4d:2d:34:07:5a:60:91:7c:be:37:fc:9a:69:61:
d6:c1:a4:ef:21:13:d8:88:8e:d4:bb:d3:19:89:b7:
27:68:b1:6f:9e:94:8a:5d:af:a7:6f:4e:87:f3:ea:
91:64:29:92:15:1b:03:8c:cb:16:c7:89:4f:2c:98:
40:19:be:f4:29:1f:80:8c:f5:bd:f6:db:4b:e1:ab:
22:1d:65:ff:8d:7d:d5:8d:a2:83:41:5d:94:0b:19:
d2:74:3c:db:76:3b:4a:9a:44:81:0c:0d:aa:f1:41:
c8:c9:5a:a7:9e:64:73:1a:8b:e1:54:7c:87:c8:f9:
78:ca:92:80:35:0d:60:9d:c2:29:f3:2a:c7:9e:de:
5c:bc:67:15:4d:ce:6e:78:55:df:6e:6f:8d:27:ea:
59:49:29:82:cc:ae:68:a8:e8:1d:88:27:49:a2:00:
c4:d0:be:03:c4:51:23:34:8b:2f:26:4e:46:e7:f6:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7B:63:8C:AD:EF:E7:B8:52:F8:83:FE:91:03:07:D8:A4:00:97:4E
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:f6:5b:22:c6:b3:7a:8c:44:3c:54:d9:e6:57:ab:32:e6:
50:97:e8:bb:9b:49:fa:3b:bb:68:e9:95:ca:b3:a4:9f:c3:e3:
14:a4:ee:30:8f:bf:9a:cf:a2:22:e8:ff:d5:60:5a:0e:6e:be:
35:d2:99:ef:88:77:92:c1:23:1e:12:fb:f9:92:5a:9b:65:26:
dc:6f:f3:66:ad:05:22:24:fd:0b:b8:13:69:c8:dd:59:50:1a:
7a:fd:ad:b3:16:43:dc:12:71:28:80:f7:e5:b3:f1:a9:d7:fd:
fc:69:51:61:a5:be:76:db:eb:3b:bd:ee:f2:dc:bb:d3:98:c5:
3f:bc:63:1f:f6:67:fe:52:c4:08:89:86:dc:16:09:a4:6d:cc:
d8:13:78:d3:c4:72:20:37:65:d3:ad:51:ee:99:38:6e:32:4f:
6e:3f:ac:d1:14:64:37:65:cf:db:3a:c6:36:76:11:71:bd:1e:
7f:e4:67:97:f3:fd:38:d9:e4:35:7b:ae:9a:3e:76:ec:f8:d0:
6f:08:d2:3f:5e:43:26:dd:64:08:0c:bd:e2:fe:9d:ab:f0:fd:
8a:22:f6:b7:67:37:2e:3a:77:c4:8e:56:f1:d9:9f:04:d4:01:
02:52:ab:38:5a:bd:bd:b2:6b:14:17:bf:8b:fe:6d:b3:58:07:
19:3a:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:55 2025 by rpki-client