Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: COfbX/Duszy/MPQPr7nyeWfHItwxuAywYu5swx+00sE=
Subject key identifier: 84:A1:6A:F1:79:D5:AC:C8:1B:58:F5:4C:ED:E8:83:93:07:45:47:58
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 019873E3136D2D5499258B8D9E42DD5D1A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0863
Signing time: Mon 04 Aug 2025 07:01:58 +0000
Manifest this update: Mon 04 Aug 2025 07:01:58 +0000
Manifest next update: Tue 05 Aug 2025 07:01:58 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: fz10U59Y8Owiz3HYyqL93NU20BlxSnaGeXqWdRt1x8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:13:6d:2d:54:99:25:8b:8d:9e:42:dd:5d:1a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Aug 4 07:01:58 2025 GMT
Not After : Aug 5 07:01:58 2025 GMT
Subject: CN=84a16af179d5acc81b58f54cede8839307454758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:e6:37:12:28:02:ec:51:2f:ec:35:6c:e4:
23:9e:5a:b8:58:5d:22:98:8e:87:81:9a:b4:f7:9d:
26:3d:39:64:16:17:65:81:59:ac:b7:69:e4:c6:c9:
39:27:64:01:3c:0b:22:9c:dd:2c:5c:a8:64:0a:d4:
57:c1:42:eb:00:ca:81:15:34:e6:65:ad:4f:b8:2c:
64:a7:20:a2:a2:83:ce:1a:f2:ba:d7:c2:a3:c8:b4:
4f:e6:d5:04:91:fe:88:86:57:0e:38:8f:39:aa:7a:
e6:4b:d0:45:ad:21:ff:32:e0:b3:4c:33:49:be:88:
7c:91:12:19:a9:8b:1f:e7:ca:48:8d:e5:09:5e:b5:
67:3c:1e:93:d7:18:f0:d1:df:b6:87:9a:8c:a6:34:
b0:60:b6:9f:bb:b5:3c:07:eb:be:4a:51:f3:c5:47:
f7:91:0b:4d:14:93:2b:e2:a8:e9:b9:0f:37:24:77:
28:6c:f0:ea:f0:24:e8:8f:56:de:66:df:c4:01:99:
01:c0:7a:ee:fd:b4:0d:17:35:34:05:0f:40:17:6c:
94:32:a1:5d:0d:42:d4:6b:7e:3e:63:b1:33:ac:e7:
d6:80:94:0d:f3:98:db:f4:ce:f9:f4:6b:ce:78:72:
d3:eb:dd:50:4c:ea:85:de:6d:54:e9:b2:e8:b5:e0:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:6A:F1:79:D5:AC:C8:1B:58:F5:4C:ED:E8:83:93:07:45:47:58
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:38:be:8d:4c:c2:2c:2b:2b:df:20:bd:2b:55:28:26:58:4c:
6b:5a:31:8a:8b:70:52:cd:50:8e:78:61:a7:60:2e:01:9c:d8:
12:ab:5b:e0:f1:15:d8:ad:17:01:c1:cc:57:00:85:cb:6e:2e:
a8:9b:c7:25:20:03:36:71:ae:93:b2:de:12:9f:64:37:9e:8a:
17:7e:54:09:87:69:c1:22:47:18:1f:f2:3c:44:fe:14:6a:fa:
44:48:2b:35:c9:83:16:35:27:63:11:57:f9:a1:1d:26:49:77:
a7:6b:e9:2c:8f:49:3e:91:f5:db:e2:48:89:59:be:d8:00:20:
c1:f6:68:2a:38:27:29:fa:d7:69:b8:f0:ef:f7:7e:07:85:11:
41:26:82:19:35:cf:97:df:5a:03:8e:f9:38:6f:95:8f:9b:c2:
fc:0a:88:45:2b:0d:1d:54:47:42:2e:c6:5d:57:5b:0c:84:0f:
92:e2:63:c8:12:e7:41:be:a7:bb:07:6d:6e:c1:49:5c:98:1c:
38:2c:7e:25:c8:57:c5:34:a7:0a:49:55:59:9c:21:5e:cf:32:
10:e3:cd:ad:c3:d6:1d:02:24:b8:21:56:bc:53:36:9e:22:74:
eb:69:5e:b3:12:29:56:4a:e6:81:73:b4:29:f5:7e:37:b4:dc:
68:a8:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:01 2025 by rpki-client