
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: MxpOb23OD5otS07Yz84mU+yl+QYmgUC+ElIaMMCjAK8=
Subject key identifier: 29:86:CF:38:5B:92:F0:B5:65:BC:1D:C0:A6:66:BB:7F:54:7A:D6:4C
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019873E3995887C12022DB08000388AED34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0A08
Signing time: Mon 04 Aug 2025 07:02:32 +0000
Manifest this update: Mon 04 Aug 2025 07:02:32 +0000
Manifest next update: Tue 05 Aug 2025 07:02:32 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: OzOlRAqrTEQJdIvrU3WF0Ee3hJsHog0oXXtocngDH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:99:58:87:c1:20:22:db:08:00:03:88:ae:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Aug 4 07:02:32 2025 GMT
Not After : Aug 5 07:02:32 2025 GMT
Subject: CN=2986cf385b92f0b565bc1dc0a666bb7f547ad64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:88:51:55:c3:3c:c9:b3:eb:31:cb:99:5c:5a:
7f:12:ec:c2:95:29:a8:94:26:e6:2c:0e:e0:66:91:
4b:db:67:b9:70:3f:a3:b0:06:b4:89:b4:f3:9a:15:
a4:d6:5b:aa:2f:28:57:f8:24:30:6e:e5:44:f3:6a:
47:a0:4c:8d:78:14:de:6d:81:5c:f3:28:68:96:01:
9b:07:b8:50:ea:cd:16:f7:1d:d5:88:48:ed:ba:b1:
c1:a8:75:b8:57:bb:a1:ac:19:ff:75:c1:04:2f:7b:
08:7a:28:2d:a3:40:d7:40:e7:40:73:ab:f3:e2:6e:
8c:bf:dc:6b:b9:69:cf:bb:e7:f0:34:e4:4a:b8:49:
85:0e:bb:96:98:4d:fc:b8:48:13:09:25:7b:ab:5d:
79:c5:e5:25:69:d7:0e:31:75:c8:7c:5e:20:db:88:
da:4c:fb:b9:f9:f0:4b:8d:4e:07:e2:36:fc:f6:8c:
9a:36:9b:8c:c4:73:22:70:5d:e2:15:33:9e:9a:f0:
ad:83:10:72:bd:59:07:dd:b5:bb:8b:cb:25:66:db:
aa:b3:74:92:4d:ae:71:80:57:e3:34:8d:05:24:14:
b9:9f:f4:80:c5:fd:60:a1:99:48:93:7a:68:9c:10:
1a:98:e5:ac:71:48:c1:34:46:9a:d6:96:de:2b:2c:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:CF:38:5B:92:F0:B5:65:BC:1D:C0:A6:66:BB:7F:54:7A:D6:4C
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:0d:9a:4a:8d:7c:7e:b2:98:ac:be:55:6d:64:95:5f:15:
40:f1:77:57:1e:fb:0e:8c:be:fa:a8:e4:17:05:80:16:f0:d0:
57:71:2a:c3:21:f4:9f:b6:c2:59:ae:89:da:99:17:50:84:39:
32:05:09:53:cd:2b:b7:fe:6e:90:89:4e:44:b0:d1:ec:91:2f:
d3:56:58:9f:71:63:6a:6d:3d:94:74:a8:b4:a8:13:79:7e:f7:
74:8f:5c:6b:ed:47:42:fd:f0:72:f9:4a:2f:29:c6:5a:0c:5d:
3b:02:bd:e2:81:63:af:6a:14:9c:84:95:22:64:a5:2c:5c:74:
65:88:8f:dd:8c:9e:f1:c1:5a:fd:3a:60:22:fb:ac:ec:2c:6d:
30:d2:7c:81:9e:48:d0:29:8b:9f:e8:97:7a:d0:22:e1:1d:95:
54:24:b6:b1:2f:c8:23:08:8e:1d:28:f8:b9:16:a1:19:05:12:
3c:bc:f2:0c:cd:ba:84:00:ae:15:93:06:05:87:9f:08:1e:dc:
96:54:ae:a7:84:d4:9d:f5:79:8e:16:d4:f6:a0:60:d8:37:57:
cc:8b:32:ed:aa:f0:fe:c5:68:6e:47:24:10:50:74:ea:64:52:
eb:bb:c5:20:6b:d9:b6:ca:cf:c9:88:8a:45:7a:1e:6a:4b:fd:
06:a4:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:35 2025 by rpki-client