Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: TziLXUsGD8471nZ7H58Rmq/xACt3/UehWenjaXe3y/0=
Subject key identifier: 23:1D:35:F5:1A:36:C0:AC:B1:1F:0F:5C:0F:05:5E:7B:8F:EB:BA:E7
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 01988E4684F6A845A4CB589F6AEE211191B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0E0E
Signing time: Sat 09 Aug 2025 10:00:42 +0000
Manifest this update: Sat 09 Aug 2025 10:00:42 +0000
Manifest next update: Sun 10 Aug 2025 10:00:42 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: FF1oK6O9okSAOtyFXy471MpDm4AyEWpHOG8WJbUI0zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:84:f6:a8:45:a4:cb:58:9f:6a:ee:21:11:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Aug 9 10:00:42 2025 GMT
Not After : Aug 10 10:00:42 2025 GMT
Subject: CN=231d35f51a36c0acb11f0f5c0f055e7b8febbae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:b5:4b:69:03:c8:88:81:3e:70:18:47:34:
1d:0c:63:25:3a:e7:1c:b9:a2:0a:8c:c7:93:ba:47:
63:dd:6d:e3:b2:44:12:bc:9f:58:de:58:37:ec:c3:
0d:6a:8d:ac:30:0f:be:d3:68:18:41:8b:fe:d2:d2:
5a:8e:25:0c:8c:a4:ac:f5:40:11:a9:bd:bc:fc:d2:
b7:8d:83:b3:d9:5a:b8:95:5e:c8:e7:4a:c5:2f:2c:
ad:89:bb:96:aa:8a:92:0a:57:91:da:fb:a9:1d:5e:
ec:e5:ab:a0:55:f3:fb:c7:b4:03:23:b6:6a:75:6f:
0b:ae:4e:5f:23:01:86:af:51:82:f8:6a:00:43:00:
c2:32:3a:06:54:91:33:dd:aa:32:d7:3e:b9:ea:31:
8c:ac:eb:1d:29:d4:42:ba:87:bf:be:d2:75:80:4d:
38:f3:c9:cd:0a:da:c0:4c:6f:f8:1b:cf:27:90:9e:
ec:f5:06:71:ee:2e:10:e8:9a:5c:cd:50:5d:64:70:
01:f2:31:f8:8a:6d:cb:ac:fe:b6:42:17:92:3c:5d:
f0:63:1c:e4:c6:a8:0d:4d:07:44:8e:fd:5a:31:d2:
92:ef:9f:26:bd:20:33:ed:5b:fd:1e:16:dc:34:1e:
05:3b:1c:0e:62:8b:c4:bc:50:de:1a:c3:e0:f4:6a:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:35:F5:1A:36:C0:AC:B1:1F:0F:5C:0F:05:5E:7B:8F:EB:BA:E7
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:62:79:d0:b5:73:05:77:eb:e5:13:cc:08:6f:47:58:2f:
58:6c:a3:42:83:a4:be:c0:9f:70:d8:c2:3a:26:7d:4d:31:bc:
3e:db:0a:f6:76:64:36:4d:a0:90:e5:3c:f7:bc:2f:fd:73:ca:
a5:d1:fd:6a:8c:25:69:7a:18:92:bd:2a:5e:bb:ad:08:43:20:
98:34:38:37:48:59:27:4d:fe:67:60:eb:10:7d:f2:4e:e6:78:
39:75:43:e3:a0:c7:f2:d5:43:b8:ae:57:a9:60:c7:b7:c2:54:
ff:53:af:ce:b5:a9:91:08:db:4b:28:64:97:1e:21:3e:21:53:
2c:ad:63:b6:bc:89:ac:b0:c0:f7:35:88:56:0f:ef:67:77:aa:
b3:b9:da:ff:95:af:65:ea:b0:05:02:a6:92:ce:6d:a9:0d:24:
29:52:66:b4:78:fb:b0:9b:12:58:47:e4:49:e5:1e:7c:0c:df:
bf:47:e6:d7:ff:b5:2f:e7:f5:8e:62:a3:13:a7:d5:a2:81:5d:
84:3b:23:cf:ad:fa:7c:ef:ab:df:7d:96:2d:20:58:62:f5:48:
42:8c:8b:5d:4e:8e:55:3b:0f:ef:74:75:e5:fa:22:5a:d2:64:
5a:c0:1e:0d:50:45:44:86:b9:3a:b9:82:39:48:78:7f:71:16:
8d:bf:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:08 2025 by rpki-client