Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: H9Gq+h3m0VBbZsoYIfpCk0hadueJ3Gj1sKhmoMEeqsc=
Subject key identifier: 69:95:A0:12:BA:82:D3:74:AA:16:B3:14:B4:3D:CE:32:49:A3:E5:C4
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 01987C407A88044DA8975526AA8CF90B711C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 15AB
Signing time: Tue 05 Aug 2025 22:00:56 +0000
Manifest this update: Tue 05 Aug 2025 22:00:56 +0000
Manifest next update: Wed 06 Aug 2025 22:00:56 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: cqEw4HLEUX56IwjezR40d1cDhGelY1EPHgLBhWduHXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:7a:88:04:4d:a8:97:55:26:aa:8c:f9:0b:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Aug 5 22:00:56 2025 GMT
Not After : Aug 6 22:00:56 2025 GMT
Subject: CN=6995a012ba82d374aa16b314b43dce3249a3e5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:be:31:a8:9f:45:e4:d8:3a:06:8f:de:49:
b8:7e:21:81:5d:be:76:77:1a:7e:86:95:e7:a4:42:
75:1b:1a:ea:1c:05:a8:7f:23:36:d0:54:8e:17:df:
63:a4:7a:48:da:ef:cf:d5:b8:42:09:a6:13:90:d7:
d8:13:47:b9:80:9e:96:c8:86:71:73:26:a5:3b:69:
e7:21:05:ef:a4:60:76:40:11:a8:8c:11:4f:b0:db:
31:ee:a7:c9:ce:66:71:eb:64:42:17:cd:fb:4d:b8:
bd:09:4f:f3:ef:66:f3:9c:4e:74:c2:44:07:95:30:
39:30:67:30:ee:2b:cb:b2:69:18:1e:4a:ae:d5:3c:
03:d8:47:1e:09:56:72:f1:3f:2e:76:37:34:cf:5f:
7a:18:29:c4:f4:62:b6:a7:56:37:23:61:c3:ae:31:
52:86:ea:8a:e3:25:20:d2:2b:63:f7:87:12:eb:e1:
2f:0c:09:f8:fd:05:78:90:e9:37:fe:cb:fb:9f:4c:
c6:f5:9b:05:8e:23:3b:a6:23:6f:52:b2:1a:dd:ea:
1a:45:d8:21:17:7f:0f:10:73:e1:f3:f5:90:2f:24:
a6:e4:00:47:9e:93:6f:25:f3:71:6e:ee:f8:1c:3d:
a0:c4:a5:af:69:0a:b4:3d:79:95:f1:2e:3f:27:f3:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:A0:12:BA:82:D3:74:AA:16:B3:14:B4:3D:CE:32:49:A3:E5:C4
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:0a:db:32:dc:98:45:56:2f:60:d4:6b:6d:63:fd:2a:6b:
1a:3d:74:ad:5a:24:30:e7:f6:8c:cc:3c:fa:4a:70:f8:53:d6:
58:fc:7b:aa:a0:35:15:7f:ef:6d:23:c7:c6:6e:d6:be:a9:8b:
01:a7:74:46:99:85:96:0e:3f:9e:61:11:6a:51:3b:32:a8:f6:
eb:91:0a:40:89:9d:42:f2:c9:16:fe:6f:41:ef:7a:07:2c:0c:
7d:43:88:a3:a7:d1:8e:29:fc:10:9e:87:20:98:69:5b:50:1e:
07:ee:68:de:bd:85:41:01:48:d0:c8:3e:b0:41:f7:bd:c7:16:
30:99:42:bc:67:7c:59:b0:8d:96:af:bb:0c:ca:cf:ab:bd:1c:
6e:d0:2a:a8:03:45:24:aa:7b:1d:cc:51:9b:64:c1:0c:c1:8e:
d6:42:4e:c5:ba:3d:01:50:5d:dc:6a:84:ee:e5:65:c2:49:c1:
4c:aa:37:88:f2:f4:f1:a3:ab:2b:46:4d:88:17:ba:ce:7c:37:
a3:d7:83:d2:d2:c8:13:12:9d:ec:f9:fb:51:7b:64:60:e1:90:
99:b2:3b:7a:5c:e6:bf:ae:9f:a7:bd:20:f9:8f:32:33:27:61:
dd:e8:45:15:c4:70:32:56:a2:e8:e8:a9:03:14:cd:66:74:5a:
fb:bb:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:17 2025 by rpki-client