Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
File: jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json)
Hash identifier: KayS2W4bDDw71D9xjjD3ZA4MEsYSCnDwfQd0un2RbwM=
Subject key identifier: 0E:E3:D4:76:B5:A5:D0:5E:06:DB:03:B2:48:D7:91:CF:AD:8A:1E:81
Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Certificate issuer: /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Certificate serial: 019873E3B41D87A84BBEC68E94DF421E4344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:02:39 +0000
Manifest this update: Mon 04 Aug 2025 07:02:39 +0000
Manifest next update: Tue 05 Aug 2025 07:02:39 +0000
Files and hashes: 1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: axr54WOPlAAEjGU3PgdiR8Y/0Ny07Mp8Ljw7kIVhbIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b4:1d:87:a8:4b:be:c6:8e:94:df:42:1e:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Validity
Not Before: Aug 4 07:02:39 2025 GMT
Not After : Aug 5 07:02:39 2025 GMT
Subject: CN=0ee3d476b5a5d05e06db03b248d791cfad8a1e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:c4:f5:47:bd:b4:f2:23:89:73:62:31:80:
98:0f:22:15:e2:f4:85:dd:c6:03:4f:0d:e5:64:e2:
19:fa:3c:41:03:bd:7c:ce:82:f3:dc:68:43:10:8c:
ea:19:b0:79:48:de:e8:da:bb:6d:1b:d5:74:a5:0e:
42:cc:62:27:c0:46:1a:87:44:d3:c4:96:7a:e1:30:
96:52:16:a4:a8:4d:f7:c8:11:e0:c6:54:0a:b9:07:
82:7d:c5:f8:08:8b:bb:4f:be:fc:ea:fd:27:84:1b:
b0:2c:ae:86:dc:92:10:ad:42:26:19:d1:db:67:76:
0b:de:e4:63:6a:1b:d0:38:1d:5d:2d:7f:c6:d7:13:
70:ff:6d:80:80:e5:b4:77:56:40:6a:9c:68:f2:45:
37:91:30:f3:ff:80:a8:f8:19:f4:74:78:1e:03:67:
5b:b3:f9:a5:56:67:b8:76:0a:35:4e:b5:12:86:97:
e8:33:cf:21:7e:34:43:3f:34:6c:07:06:a9:90:54:
d9:11:1b:9b:a3:06:6c:17:16:a0:f4:ec:39:ed:5d:
65:e3:1a:1f:e1:a6:40:64:51:b1:e1:06:f3:50:26:
0d:1f:47:a4:b6:47:c7:b1:14:12:49:54:94:2e:2e:
7f:46:50:90:3b:b1:3a:31:9f:c5:4c:db:c9:2f:2d:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:D4:76:B5:A5:D0:5E:06:DB:03:B2:48:D7:91:CF:AD:8A:1E:81
X509v3 Authority Key Identifier:
keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:3f:75:54:3e:82:79:5b:6f:6d:0d:a0:d4:94:98:6b:45:
3d:76:89:43:fa:53:23:6d:3e:b1:8d:8f:b4:8b:fa:fa:66:6f:
f7:e9:35:5e:49:68:86:c2:6e:9d:f6:36:1a:d2:25:44:95:2d:
38:45:43:ec:83:37:22:9b:82:ac:8b:fa:25:6b:cc:c9:86:2e:
44:b7:79:82:a9:13:2f:c1:6f:60:e7:cc:44:75:a2:39:10:c1:
39:8d:98:18:b3:b5:7e:79:17:88:99:e9:2f:c0:96:1a:32:ac:
7c:8b:1b:4b:7c:96:09:75:ef:d0:34:4f:76:93:4f:00:de:68:
8b:ff:85:dd:84:26:53:dc:7d:ff:cb:03:12:50:fd:b2:e7:4e:
aa:b2:43:6f:5e:e3:3d:c5:c2:a5:fc:fb:46:89:fe:1c:8e:c9:
8e:03:cf:07:26:1b:1d:a1:69:2d:6e:f0:ca:89:d3:96:d1:19:
4a:49:db:09:5e:29:9c:e9:0a:94:83:14:eb:b7:c5:a9:2e:70:
04:4f:cf:69:0c:e3:85:8b:c4:68:19:af:d3:69:a9:11:de:86:
f4:6e:4d:74:b6:97:1b:6a:1c:26:e4:20:c2:0e:4a:bd:43:f6:
9d:12:bc:da:d0:1e:24:0c:07:c8:b8:9b:7d:5a:6a:90:7a:cb:
f3:b1:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:13 2025 by rpki-client