
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: rMOJMkBKZFwvu4spYtITx9lFW/thLrDdJtpbXDtT8dY=
Subject key identifier: ED:EE:8A:C7:22:B2:E9:23:DF:35:31:46:80:C6:CD:61:2E:5B:71:1A
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 01987E2F2FA5552C85DAF60FA3BA425A9F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 07:01:18 +0000
Manifest this update: Wed 06 Aug 2025 07:01:18 +0000
Manifest next update: Thu 07 Aug 2025 07:01:18 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: TBa68oU0J1XHVVaLvgAbhMM5N1pn5ZQhs/PUphEBjTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:2f:a5:55:2c:85:da:f6:0f:a3:ba:42:5a:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Aug 6 07:01:18 2025 GMT
Not After : Aug 7 07:01:18 2025 GMT
Subject: CN=edee8ac722b2e923df35314680c6cd612e5b711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:5e:2f:8c:e1:4e:0b:56:12:3e:56:25:86:
ef:a6:27:f4:d0:1c:e4:18:a3:c2:ce:c7:72:d9:74:
11:99:59:84:9a:c5:e5:0d:f6:ae:e6:f1:35:2d:1b:
70:e5:b2:d7:19:51:05:82:1a:f1:1f:bd:df:5e:f1:
a3:1f:6d:4d:b5:15:cf:20:db:c7:af:43:50:17:7d:
44:cf:7e:12:22:a0:42:f2:99:ac:cf:73:cb:9e:07:
cb:1f:91:8c:33:69:06:71:aa:8d:8c:e1:00:99:83:
9b:82:77:97:f2:a4:17:46:db:0f:25:72:c5:c7:5e:
f6:25:d9:a9:7e:8d:0f:fe:23:3a:23:3c:55:98:2f:
a9:2e:4a:03:51:7a:e5:f1:74:59:fe:bd:df:66:ef:
70:3e:06:7e:40:d2:b8:75:84:37:13:27:cc:b6:02:
3e:5d:15:df:3a:e2:98:88:d8:45:e9:b6:a4:d2:e7:
b0:a1:6e:2f:b4:19:05:08:d4:df:5a:d4:20:87:31:
2e:6d:39:08:f5:fc:00:32:64:aa:37:0b:65:71:cb:
91:1c:cf:f8:9d:69:ef:df:3a:3f:f9:5f:fb:69:fc:
4d:a6:42:b9:6b:ec:01:0c:a8:33:c6:77:8a:57:b6:
41:4e:f8:cf:b8:55:c7:c1:ca:02:0b:82:e9:25:b0:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EE:8A:C7:22:B2:E9:23:DF:35:31:46:80:C6:CD:61:2E:5B:71:1A
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:c0:df:2d:ff:01:27:0c:61:69:af:f0:b0:e9:43:16:41:
c3:f4:52:96:c2:3a:2d:94:de:96:c0:7b:ad:6a:6d:63:89:9e:
a2:1c:e9:04:89:db:4b:91:c9:f9:ea:27:64:a4:22:38:2d:2b:
b4:4b:b8:2b:54:d8:53:32:dd:fc:57:b3:66:cf:04:13:b9:eb:
17:36:95:f0:43:b1:31:6e:f7:8a:46:60:5a:85:f1:0f:9b:96:
9a:b0:62:12:5b:f2:ce:43:bd:83:07:a7:62:b5:b2:da:8c:5c:
8f:59:2d:8e:8e:90:36:1a:f9:e1:68:70:0c:73:19:ed:83:52:
94:e9:b7:02:3f:18:80:bb:76:88:57:ad:b2:53:cc:86:78:58:
d6:54:59:8e:49:21:bd:53:39:ef:16:65:9b:ff:17:aa:d7:4c:
78:30:df:cd:bb:4f:92:11:b1:e3:e3:df:57:7f:60:f5:c5:76:
e4:b7:37:38:c4:63:97:e4:2a:17:e4:e3:2e:0f:f3:83:b1:80:
c5:08:48:b8:d8:06:fb:c1:b2:1a:15:44:80:b9:02:89:41:a6:
71:2e:e2:60:8f:30:ce:61:69:0b:d3:41:49:47:22:eb:a6:32:
6d:a2:62:01:d6:8d:51:e6:2b:9a:80:06:70:a5:74:ee:58:e5:
74:56:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:59 2025 by rpki-client