
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier: LoNKvfhb42fip1MSNdVhUPDGA64jKY3h0L89tjhW2M0=
Subject key identifier: A8:1A:FB:07:0E:26:2C:03:EE:BD:9F:CF:32:9C:64:39:25:66:97:13
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial: 019875D0D48065A42A8676A748917B287A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:01:16 +0000
Manifest this update: Mon 04 Aug 2025 16:01:16 +0000
Manifest next update: Tue 05 Aug 2025 16:01:16 +0000
Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: F40frCrq+Cmwvz9o2S1im6oWMCIiaLjDEp6RLGWaWyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:d4:80:65:a4:2a:86:76:a7:48:91:7b:28:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Validity
Not Before: Aug 4 16:01:16 2025 GMT
Not After : Aug 5 16:01:16 2025 GMT
Subject: CN=a81afb070e262c03eebd9fcf329c643925669713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:a1:a2:ea:ef:a6:75:2b:72:85:0e:43:1e:
13:06:ca:73:d6:2e:f3:4b:45:ff:92:6c:c3:d3:8f:
5b:32:6c:d3:5c:df:ed:d7:45:37:9c:3a:ba:86:9e:
22:98:62:3c:73:53:2f:cb:13:22:87:07:0f:23:e2:
17:f0:1d:02:d0:55:33:20:5c:e8:f4:11:79:dd:f3:
83:ac:ff:45:f4:a6:e3:95:d8:9f:4e:55:60:43:af:
da:ef:ef:fc:0c:f1:15:1d:58:03:69:f4:eb:c0:c1:
ff:42:a7:a6:6e:12:d3:d4:15:6b:08:91:94:df:74:
b6:17:5a:da:6b:dc:3a:2c:bd:ab:42:9b:bc:ca:e1:
35:30:16:4f:b0:15:ae:5e:43:75:b2:9a:ae:07:63:
52:66:cb:39:25:bd:8a:a0:b4:be:31:5c:8f:2a:58:
ea:5c:7d:fc:31:2f:90:cb:c1:8b:93:6c:68:9b:f5:
7c:57:cc:fd:f0:57:ed:6d:4a:4b:a5:d1:8f:3f:a1:
d9:18:d1:c2:44:21:df:4e:be:b3:be:90:82:47:28:
44:8f:c3:08:61:b9:93:e1:ec:f6:e9:92:31:38:b6:
36:70:e4:76:e8:00:d7:c1:c1:1c:37:e1:be:51:01:
76:63:e6:4d:44:8b:a5:b1:f0:05:d8:93:2d:2a:4c:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:FB:07:0E:26:2C:03:EE:BD:9F:CF:32:9C:64:39:25:66:97:13
X509v3 Authority Key Identifier:
keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bc:bf:66:82:bb:87:cb:2e:e1:0e:04:25:56:87:7d:42:71:
b5:6c:92:b0:c3:fb:81:81:5b:bf:f3:a8:c1:e2:39:37:74:8d:
5d:82:5a:58:58:4e:f8:94:bd:57:fe:c6:0d:97:61:2a:75:7f:
97:a5:8f:d8:b4:52:b4:96:1c:18:54:c3:c2:cd:8e:10:58:43:
71:26:92:8f:ee:d1:09:2b:45:0a:e5:69:c6:c7:9b:69:ea:17:
c5:9f:f2:35:0c:54:5f:a3:8b:82:79:9e:85:66:0c:1e:03:9e:
2c:82:4c:0f:d4:aa:0e:c1:62:df:78:62:8a:45:e6:f1:b2:cf:
1b:38:4a:aa:3b:0a:7f:cf:6c:ab:57:9c:fc:61:3d:2d:31:66:
b6:d1:ea:30:76:78:c7:4f:0c:71:69:b4:ee:4b:73:b2:34:54:
c3:c2:ac:be:94:da:d4:8d:00:5a:a1:df:02:c1:6c:22:7c:6b:
56:7e:16:db:16:f1:1b:ec:ad:64:04:75:a6:96:2f:00:c4:80:
ef:6b:51:f7:4a:b8:35:90:39:71:30:d5:02:26:51:94:b3:92:
23:5d:51:7c:8e:b6:f4:78:7a:50:c1:78:07:4d:d2:a6:4a:03:
b6:a7:8f:e6:18:3b:66:9c:d9:3e:b5:13:0e:0e:d9:da:8b:97:
19:46:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:09 2025 by rpki-client