Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier: +pAwDhQ/XpczRzD5wKJ1xUxHTYTAlEJdDE8B/EL6vIA=
Subject key identifier: 99:FE:2A:63:3A:79:7C:1E:82:9E:9E:7F:FB:2F:46:95:6D:05:FF:7C
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial: 01988CFD563E6CBA3B6CBB1ABA1AAF21181E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number: D8
Signing time: Sat 09 Aug 2025 04:01:09 +0000
Manifest this update: Sat 09 Aug 2025 04:01:09 +0000
Manifest next update: Sun 10 Aug 2025 04:01:09 +0000
Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: l2VTDScifLjZkxucs7xC/pAkd1oPcBlImzP3qGv1AM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:56:3e:6c:ba:3b:6c:bb:1a:ba:1a:af:21:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Validity
Not Before: Aug 9 04:01:09 2025 GMT
Not After : Aug 10 04:01:09 2025 GMT
Subject: CN=99fe2a633a797c1e829e9e7ffb2f46956d05ff7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:b4:ef:5c:a1:f0:74:07:29:0c:83:2a:bf:
7d:4b:04:ba:a4:5d:01:3f:c8:29:e5:61:50:6e:97:
42:be:4b:e6:ec:65:ba:b6:32:3b:97:87:04:2a:1a:
8e:0d:a8:e7:18:83:0a:43:48:33:30:fe:f7:ee:78:
f8:35:54:5f:56:b9:31:77:fe:74:74:51:fc:29:d8:
8c:52:86:d5:e5:e2:49:85:e8:1a:59:a5:8c:a8:14:
1c:06:81:70:df:03:0f:80:5a:bc:e0:0c:4e:5d:1e:
38:67:e0:37:ce:72:12:82:42:9a:2c:e3:c2:4e:65:
b7:60:7d:11:c2:1a:5f:76:66:1e:2e:ec:c0:ba:01:
a3:a1:08:89:90:90:4c:a3:55:e7:f0:ce:b1:ad:06:
d7:e3:9f:38:e4:23:84:28:db:40:8e:86:ce:ba:35:
18:fb:5f:b1:57:82:86:c6:57:b9:e3:23:e6:cd:28:
ed:2c:93:ae:3e:03:1f:9d:86:99:ef:38:7e:e4:7c:
97:8a:ab:61:9f:56:20:f8:a6:2e:70:12:0d:57:c4:
51:9c:3e:53:f3:44:4a:48:8a:61:70:a7:e3:04:d6:
c6:5e:8a:9a:b1:5d:d6:68:26:8a:d2:97:8a:1e:72:
e9:de:88:90:40:8d:81:6e:b1:1d:47:3b:59:5c:e7:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:2A:63:3A:79:7C:1E:82:9E:9E:7F:FB:2F:46:95:6D:05:FF:7C
X509v3 Authority Key Identifier:
keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:07:a4:27:22:e2:7c:73:c8:0f:f0:c3:ad:b7:4a:c0:af:
16:a3:7e:88:73:f3:0c:14:52:ee:ac:41:b8:62:fa:fa:f5:10:
3c:70:ac:46:f3:f7:9e:2d:af:50:cf:20:38:b9:2a:f0:a2:b4:
41:d1:36:10:1a:c3:1b:c6:48:ca:6a:95:a0:2e:b1:51:09:48:
b8:20:e8:c4:8f:fa:96:1c:22:d6:de:dd:93:0e:0c:73:3e:a1:
3d:97:c1:da:0b:ba:c6:86:b7:7e:cb:7c:81:db:cd:8e:e7:32:
a7:81:22:dc:29:3e:ec:d4:69:4d:a0:ea:a7:f1:07:8a:6e:94:
de:a5:2b:4a:ec:f4:73:63:7e:f4:04:5a:10:91:72:05:7a:02:
e1:b1:ba:3d:e2:5b:84:1f:8d:3e:a5:b0:c2:11:cd:b3:14:a2:
d3:d0:3b:cb:40:8e:32:f1:0c:e9:5d:ae:c7:64:cd:40:42:ff:
8d:5c:42:7b:24:85:a4:93:13:c0:58:1a:48:60:be:e3:a0:54:
8b:7a:85:ce:46:ea:3c:63:64:b3:55:5b:ed:1a:e1:3b:6c:f7:
e8:ea:0d:6a:ab:82:4e:f3:ff:76:a7:f3:f0:15:87:8c:9b:0b:
55:17:9a:fb:61:68:59:52:72:ed:d6:35:c6:24:ad:54:72:90:
dc:02:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:48 2025 by rpki-client