Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier: pVgjUveOfRYJgA5DmLERCCAosyPqNxu2uaAr+Ltbrhk=
Subject key identifier: F8:52:7C:00:F6:8E:DB:7C:3A:F0:01:AB:EF:C0:84:74:3E:10:5F:4A
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial: 01988EEC75B9C9DBA66945A79507965DE596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number: 09CA
Signing time: Sat 09 Aug 2025 13:01:57 +0000
Manifest this update: Sat 09 Aug 2025 13:01:57 +0000
Manifest next update: Sun 10 Aug 2025 13:01:57 +0000
Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: V+JbyQ+xiPhTLxKRrugw1I6A9KiWcj1ypct1q1jgc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:75:b9:c9:db:a6:69:45:a7:95:07:96:5d:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Validity
Not Before: Aug 9 13:01:57 2025 GMT
Not After : Aug 10 13:01:57 2025 GMT
Subject: CN=f8527c00f68edb7c3af001abefc084743e105f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:f8:18:e4:2c:4e:ba:a1:ed:53:f1:48:94:
ad:06:78:cb:11:95:11:76:ec:b1:f2:69:7a:06:80:
97:47:f8:03:ba:36:fd:e8:8d:55:46:61:60:b2:54:
50:11:aa:ed:10:b0:82:ee:92:f9:6a:30:3e:12:da:
3c:0d:57:a0:87:38:c6:fe:2f:c4:0a:2d:20:e4:fa:
3e:3f:80:0b:cd:31:2c:7c:ce:bb:36:56:59:00:26:
5a:c8:da:98:76:0a:58:59:20:01:62:38:89:6a:e8:
65:b5:9e:00:8d:c1:f4:40:7b:f9:a1:7c:ff:75:ed:
6d:b8:12:9a:62:bb:df:20:e5:6e:2a:c5:2b:2c:0f:
35:e0:1a:3f:bf:ba:57:10:cb:7d:5f:67:2e:65:73:
e2:ab:b8:14:46:6a:a6:0f:bf:54:38:9b:0e:d5:ca:
6d:be:91:5b:3b:06:0a:18:fa:ef:da:82:47:09:81:
2e:71:66:92:11:68:f5:fb:b8:fc:f3:53:cf:12:63:
f4:3f:33:e9:24:ff:60:0a:c3:c8:24:d7:e6:96:ea:
ed:d3:c9:b0:ae:62:1c:27:ec:18:31:05:36:ed:a2:
9e:8b:7a:54:15:1e:26:7d:e0:99:d4:32:7d:c4:1d:
d8:2f:71:22:0c:0a:60:01:27:01:b1:29:6c:08:24:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:7C:00:F6:8E:DB:7C:3A:F0:01:AB:EF:C0:84:74:3E:10:5F:4A
X509v3 Authority Key Identifier:
keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:be:5e:e9:ae:e4:ee:9d:17:55:a5:21:52:15:3e:e6:5b:8e:
06:04:ec:a6:40:7f:a2:9f:77:e7:73:8c:15:f0:8d:85:c3:c3:
03:17:bf:5f:3c:71:2b:c2:7c:88:45:b8:6a:73:4d:89:52:6a:
10:3c:93:02:63:d3:f1:f8:90:71:5f:c0:9e:32:4b:60:2a:0a:
4a:c3:78:38:ae:d1:ca:65:ae:e8:5b:ad:4d:1a:6b:07:77:e9:
38:14:7d:de:2d:15:cc:38:97:ad:c8:f2:3c:b9:a0:68:3e:7f:
d7:b5:ed:33:1e:fe:43:d9:e8:cb:a5:cf:0b:8b:cd:78:dd:ae:
44:b8:f7:31:a9:bb:66:f0:e5:a6:bd:db:49:dd:cd:82:dc:94:
63:54:85:7c:28:0d:5a:4f:44:be:35:42:6a:5e:00:ad:bb:d9:
a0:56:c1:42:84:ea:d4:1a:c0:1a:61:f5:88:4b:a4:98:d6:82:
23:9c:84:4d:cc:74:a3:78:66:db:f5:f4:2c:50:00:1f:f6:b2:
f1:60:91:cb:67:33:5e:c3:c1:0b:32:ed:0c:b2:b7:5c:df:e1:
46:b6:f9:91:25:31:f8:60:ad:ba:22:41:b5:e1:96:e9:50:8e:
0a:a3:82:68:c7:e5:f8:04:ff:df:d3:4a:25:01:16:88:7f:a2:
7a:a2:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:34:55 2025 by rpki-client