Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: KRj9fdk+QEJ+AecGHGx7MSrGfwfb3ftlvZYhSjk9vlw=
Subject key identifier: C9:E8:82:23:38:3D:AD:D0:AB:6D:4E:19:8B:6D:6E:A0:EA:05:CC:62
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 01988B0FBBDE86B9EB37E142A5AB2C75F28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0F1C
Signing time: Fri 08 Aug 2025 19:02:00 +0000
Manifest this update: Fri 08 Aug 2025 19:02:00 +0000
Manifest next update: Sat 09 Aug 2025 19:02:00 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: 7d5ZOKdPOEUKyKRFLuigPQXBCl1X7idfJN7sUQ33Z5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:bb:de:86:b9:eb:37:e1:42:a5:ab:2c:75:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Aug 8 19:02:00 2025 GMT
Not After : Aug 9 19:02:00 2025 GMT
Subject: CN=c9e88223383dadd0ab6d4e198b6d6ea0ea05cc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:7d:71:d4:66:af:62:73:54:7c:29:d2:a1:
8a:d1:40:73:0a:31:1c:1c:62:9c:84:ae:8e:37:07:
21:ef:ec:91:0c:df:8a:13:ad:d3:c9:60:03:99:b8:
cb:1d:fd:16:59:f9:fe:5d:8a:93:a3:b2:91:53:96:
0e:16:02:cc:6a:c3:00:a5:26:41:8d:c4:4f:af:cd:
68:88:c2:5f:7d:da:34:6f:6a:08:a3:ab:04:4e:7c:
13:c9:bc:6b:48:67:00:99:1d:ee:83:08:bf:ce:58:
ab:8e:d5:2a:a7:23:7e:80:0a:85:e6:6b:a6:77:84:
7f:3b:96:97:96:f1:dd:b2:2a:27:62:57:52:f4:49:
32:10:8b:ff:a5:da:79:67:ab:d0:b1:2b:47:c1:91:
88:cc:8b:a8:47:b2:d6:fa:55:7f:81:eb:24:81:c2:
af:81:f5:72:88:9b:a9:dc:53:a9:04:15:29:12:29:
61:a8:22:64:0c:2e:bd:6c:02:01:4d:7f:73:51:18:
79:d6:24:3b:91:aa:62:01:8e:5c:b6:2b:53:f0:14:
1f:b7:ae:42:81:3a:ef:0a:94:3e:75:73:aa:ec:58:
39:cc:af:e6:08:9a:29:3c:4a:f3:3c:ca:82:e6:b2:
a9:d9:c9:62:bc:80:de:49:0a:21:e0:b3:ac:ae:8c:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:82:23:38:3D:AD:D0:AB:6D:4E:19:8B:6D:6E:A0:EA:05:CC:62
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:a2:b1:b3:73:94:30:2a:53:84:59:bc:37:8f:76:e1:19:
4e:c9:ee:15:e8:c9:8b:e1:25:04:c2:69:95:33:76:12:15:0b:
c8:5e:e0:6e:53:80:d6:05:fb:d2:04:10:40:42:60:be:7b:b9:
f8:18:2d:64:53:25:24:0e:1a:51:2a:65:45:b2:8b:6b:84:1a:
a9:9e:41:d9:92:4b:75:cd:eb:17:78:c4:ff:a1:c2:cf:8b:40:
3a:aa:7b:02:c2:44:b3:c7:90:1f:81:89:06:3b:8a:db:0e:31:
7f:e1:8f:28:c3:d2:a7:2f:44:3e:3a:f4:c2:7b:ce:fa:73:62:
4d:c4:b6:b5:2a:55:5d:df:f5:14:7c:fd:03:fc:3a:6b:a3:25:
89:10:18:6c:bf:ba:10:b6:21:5e:76:17:1b:e0:84:f1:7e:7b:
1d:6c:19:f2:b9:91:6a:07:35:e6:44:c1:05:8b:90:90:d2:db:
eb:b1:17:0d:c8:3f:3f:c7:2f:ee:a1:3d:b9:34:2f:a4:4a:a0:
c0:25:4c:13:63:19:b1:fd:1d:00:22:98:2e:5b:7b:90:1f:71:
74:b0:9d:f2:c0:22:9e:2f:24:ce:91:48:c1:4b:89:82:d5:81:
ae:0b:49:50:f6:c5:63:2a:0d:75:39:f6:5d:6e:1c:dc:23:cc:
8f:24:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:03:15 2025 by rpki-client