Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: 6AtNJjvVEQotVrVa7yTY3VhI0pC224BoQgSTNddDs84=
Subject key identifier: 89:30:15:16:61:3D:50:61:4E:9D:09:D6:D5:DB:B9:AC:68:64:AC:C0
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 01988B0F0B99C58B4C212E4B9A47C8520BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 0ADA
Signing time: Fri 08 Aug 2025 19:01:15 +0000
Manifest this update: Fri 08 Aug 2025 19:01:15 +0000
Manifest next update: Sat 09 Aug 2025 19:01:15 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: pOPLCO3Y3rpP6WeIzm6FHnYMKNDTUoih4shDorTAkXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:0b:99:c5:8b:4c:21:2e:4b:9a:47:c8:52:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Aug 8 19:01:15 2025 GMT
Not After : Aug 9 19:01:15 2025 GMT
Subject: CN=89301516613d50614e9d09d6d5dbb9ac6864acc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:b4:cf:50:fa:a9:67:66:0c:a1:6b:2e:18:
df:20:54:82:d6:07:50:05:56:64:52:a0:92:30:49:
d6:6e:c1:fb:fa:15:dc:9e:5e:0b:00:4c:85:58:1d:
14:2b:21:40:b2:9a:ab:0e:90:bf:5b:c1:b9:a3:13:
cc:44:02:22:93:6a:fc:28:3b:1d:e4:d7:a6:50:d5:
5b:ef:11:84:ef:cd:94:96:72:c9:7d:c5:d3:5a:ae:
12:63:d0:ca:75:33:03:ee:8a:30:20:00:a5:4f:fb:
fd:75:21:77:35:0c:be:5e:ec:57:f9:e6:bc:4a:4f:
60:e1:91:24:59:58:a9:09:e4:18:bf:14:dc:b3:4d:
a9:53:39:e2:76:3f:16:7a:f8:bd:04:70:d3:ec:c2:
60:e7:4e:8b:e9:90:37:e8:41:8b:b5:6c:df:d3:15:
f0:88:f5:f0:fa:de:23:6a:fc:11:09:4a:3c:c8:b1:
ba:9d:1c:d6:dd:60:c9:a5:2e:2c:02:bf:05:95:96:
21:01:d7:5c:ae:c2:47:53:df:9d:2f:df:db:ea:ed:
6b:4f:24:db:c9:ee:f5:95:15:23:70:fe:b0:f7:4c:
b0:23:32:7d:e0:0f:6a:66:20:d7:bd:ff:92:5a:c1:
3b:d2:13:f1:6d:a4:ac:c9:91:7d:31:d9:81:98:71:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:15:16:61:3D:50:61:4E:9D:09:D6:D5:DB:B9:AC:68:64:AC:C0
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:c5:f8:5f:1a:2f:d7:9f:5b:48:9e:08:a3:94:89:1b:2d:
06:bc:42:bf:6e:94:8e:2e:30:ec:5c:05:06:ad:7a:57:9a:ee:
2e:61:f9:94:4d:0c:d9:d2:e2:ef:62:b6:40:32:fd:38:ef:50:
c2:fb:d1:a7:cf:12:4e:fc:7c:4d:a4:f0:78:1f:e4:2e:c5:11:
4d:63:2a:0d:b8:46:b2:6e:c8:9e:21:1f:66:11:ef:f6:29:86:
8f:ee:30:ae:f4:b5:bc:b0:e7:e7:92:a5:dd:7c:5f:b8:aa:17:
45:87:ec:05:93:30:12:2e:aa:1e:b3:5e:d4:90:8e:a0:cf:51:
27:a3:4c:a8:18:55:42:b7:4e:cb:da:55:00:cf:00:45:a0:0f:
67:a4:a9:12:30:a5:b6:a4:65:c2:58:fc:f7:29:b7:4b:84:55:
f9:a9:82:0f:db:42:86:d5:27:17:bc:07:7b:04:41:1d:ad:a7:
b4:ed:ab:e9:17:25:2a:78:50:66:95:22:15:db:03:b7:4d:64:
ac:02:22:54:5c:8d:b4:f6:6f:6c:b7:82:9a:cd:16:6f:12:99:
3a:bc:b6:98:7b:32:60:d0:bc:53:46:6f:ec:87:6f:3a:9b:72:
41:41:d6:06:c0:74:85:ee:5a:93:8b:17:f3:de:18:9b:7f:67:
81:d8:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:18 2025 by rpki-client