Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: yn55/qtvQKFVnt1OL2gMFxiluG4LIixqlm76qXQDkOw=
Subject key identifier: C7:3E:94:B7:3F:DA:09:D8:E5:82:55:1C:21:35:B1:52:1A:7A:9C:3E
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 01988DD87F4B1EF14C71D4FAC04F5856C130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 1125
Signing time: Sat 09 Aug 2025 08:00:32 +0000
Manifest this update: Sat 09 Aug 2025 08:00:32 +0000
Manifest next update: Sun 10 Aug 2025 08:00:32 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: 1wOP9uF/8NdJMBrrp9X79QGpSEWRJrpfJq40ebmwczk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:7f:4b:1e:f1:4c:71:d4:fa:c0:4f:58:56:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Aug 9 08:00:32 2025 GMT
Not After : Aug 10 08:00:32 2025 GMT
Subject: CN=c73e94b73fda09d8e582551c2135b1521a7a9c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:07:f2:3d:88:22:f9:87:a0:8d:f5:9d:1e:
88:e9:9d:6f:a3:2f:ce:fc:55:c9:d9:c6:15:93:f5:
38:06:f7:53:ff:4a:d9:c9:f9:10:10:6b:ff:e4:99:
e8:bb:9e:ab:4d:28:88:7f:26:c2:48:00:ee:ec:33:
e4:34:37:2b:7b:5b:7d:f4:6f:73:b5:a9:3b:d0:d4:
f0:48:9b:5b:4b:d5:90:86:74:d3:9c:e5:8d:b8:3e:
48:e2:b0:de:af:e9:92:c0:d1:21:1c:db:3a:36:5b:
e8:06:2d:26:00:70:35:81:83:b3:a0:a3:7b:24:b0:
06:b5:72:bc:ad:e6:17:a2:3a:93:b9:ce:a4:4c:bb:
49:a6:e2:a8:ea:ea:de:60:63:1f:71:36:f0:38:6c:
70:ae:d9:2b:e4:4f:2e:ce:d1:40:ff:80:c5:e7:b2:
7f:e9:a9:c2:2e:df:ef:cb:8d:13:8f:87:35:f8:e3:
88:42:15:f2:71:38:e9:64:53:fb:8a:ea:a7:d5:af:
77:a5:45:82:43:14:ab:e9:a7:77:3a:58:40:6a:fa:
6d:2e:11:b3:42:44:19:89:25:da:9b:4a:8b:22:50:
8c:4e:d4:9d:80:ec:26:5e:f9:33:f6:24:97:82:b3:
b6:c5:ce:bb:51:df:dc:c6:52:c9:84:66:ba:e4:6d:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:94:B7:3F:DA:09:D8:E5:82:55:1C:21:35:B1:52:1A:7A:9C:3E
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f7:89:01:24:d1:1e:60:87:eb:64:78:e1:56:67:96:36:0a:
c5:40:f5:db:15:6d:bf:cf:97:ee:5b:1e:19:7a:39:d9:9b:05:
2c:61:fd:42:7f:3e:3d:2c:7e:60:e1:6b:34:e2:69:c7:74:41:
cd:4c:73:9b:30:0d:82:84:e9:8d:79:1d:78:06:d5:e1:52:29:
76:6d:c8:6d:4f:1e:3f:aa:b5:9f:c5:cf:92:d8:aa:3d:33:10:
28:11:2a:bd:8d:62:ec:3d:f2:b6:ee:62:b9:8e:6b:8c:02:f1:
ef:92:0e:94:81:94:b1:70:8d:58:86:25:d6:2c:21:b9:88:4c:
9b:a6:56:d3:14:db:c0:0a:e3:c6:36:95:de:0e:9a:d9:d8:95:
b9:91:3c:2e:9e:76:74:1c:49:0b:70:52:52:7c:f3:ac:46:90:
d1:50:7b:21:ec:85:86:68:82:24:00:70:9e:70:01:e6:31:b5:
5a:be:6c:de:8f:a1:00:22:de:3b:1a:0f:33:c7:81:f4:d3:4b:
05:48:45:1a:9d:65:26:31:ee:74:a8:da:6a:4d:09:4b:70:a7:
aa:b8:1f:a9:01:1f:52:21:74:55:6a:96:4a:fa:ad:29:ce:65:
15:af:bf:a6:34:49:ae:fa:b5:d1:3d:d1:01:2d:65:27:15:0d:
b8:b7:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:56 2025 by rpki-client