Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: tWk1U1ZeSPFQexCLG6kcCRUXYK2yxTiWkdXL36EI848=
Subject key identifier: 6B:B1:A8:16:87:0C:E2:00:85:E7:62:13:8F:C1:00:E6:A9:74:AC:25
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 01988F901362D4C9C9B79587269F70657657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 0E78
Signing time: Sat 09 Aug 2025 16:00:40 +0000
Manifest this update: Sat 09 Aug 2025 16:00:40 +0000
Manifest next update: Sun 10 Aug 2025 16:00:40 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: UGPjps0eHSyTg/g5n8aB8M+Qo+TMlviXii1sd9NLuWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:13:62:d4:c9:c9:b7:95:87:26:9f:70:65:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Aug 9 16:00:40 2025 GMT
Not After : Aug 10 16:00:40 2025 GMT
Subject: CN=6bb1a816870ce20085e762138fc100e6a974ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:7c:6c:8c:48:8e:64:41:44:54:3d:2e:34:
e3:08:cb:71:0a:2e:97:6c:50:83:c7:ae:40:8e:c2:
96:40:01:ff:d6:eb:3b:60:25:75:df:db:06:95:ff:
ff:e2:39:46:37:d2:34:56:e6:7d:9d:a8:30:1d:a5:
17:ba:3d:0e:12:ae:ee:9b:09:32:05:8c:99:23:2c:
79:e4:96:41:b7:f7:d4:0e:27:86:35:39:99:d8:5f:
fb:65:14:62:a5:1c:9f:be:97:a8:62:4a:de:10:8e:
42:d2:3e:36:b4:8d:30:f5:0c:ba:56:99:f6:70:4f:
62:82:a8:50:8a:7f:80:97:8e:6e:d3:14:1e:db:3e:
62:7c:e6:bc:59:c9:78:be:73:0d:5d:a0:bd:8a:85:
0c:a0:12:e0:fb:73:bf:2d:79:9f:a7:20:05:92:52:
da:a8:c9:64:bc:4f:30:7f:56:1b:a7:56:c7:74:7b:
65:86:3f:61:e2:1e:fc:27:12:39:ab:6e:b8:51:b8:
ae:c4:46:49:69:e5:d4:3f:ef:f7:40:a2:aa:bb:1c:
fa:71:14:86:20:96:f1:c1:23:a9:45:48:de:76:2c:
a9:53:a8:6f:cf:bf:dc:ce:3b:60:f9:cb:c3:e0:fc:
2e:f9:67:fe:84:e9:6e:d1:69:d1:3f:78:82:8a:83:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:A8:16:87:0C:E2:00:85:E7:62:13:8F:C1:00:E6:A9:74:AC:25
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1b:4e:7a:45:00:fd:64:62:80:37:34:a5:12:aa:66:33:b5:
c8:c0:f1:a2:f3:e6:16:64:07:3c:cf:22:79:6f:43:a7:77:02:
05:0e:e8:4e:41:d7:2a:e0:da:b7:8b:6e:15:fa:55:bf:fd:29:
60:7b:cc:65:84:a1:13:32:59:ef:d9:3d:92:b3:a1:2b:d5:05:
65:cb:98:96:a7:2d:c7:a0:3d:79:48:40:75:19:3c:0f:48:e6:
5b:fa:57:27:87:76:21:25:8f:c1:79:36:c9:f0:f1:c0:02:f3:
e3:3f:65:38:97:f0:af:20:33:c9:86:8b:a5:22:0e:18:cc:3d:
93:87:a4:41:51:54:9e:73:24:92:b5:a8:26:01:71:4f:61:b3:
2c:b2:6b:f5:72:19:aa:72:61:78:35:39:15:50:49:3f:e3:a1:
ba:04:0a:f4:39:51:cf:b7:95:b2:f4:de:e6:46:61:eb:e6:c3:
47:38:76:96:5d:00:60:58:b0:dd:91:68:4a:32:ec:b6:dc:1a:
a6:35:06:27:90:87:09:82:38:24:f1:65:11:36:e4:a6:6b:7e:
9a:f8:90:be:22:b7:07:dd:51:8b:27:55:7d:c8:2c:89:92:45:
f2:1b:a9:2e:a2:e4:6e:3b:97:ff:6d:f4:43:51:2c:aa:09:f0:
8f:ef:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:50:57 2025 by rpki-client