
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: YpwYOSBaOqzTvXc21lc7iDltt/GYqtXSGasTMXJ3b84=
Subject key identifier: EB:E6:E3:94:45:71:C6:C1:C9:FE:3A:00:C0:3A:73:CF:2B:14:EA:E6
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 01987450761D88276451A41670625201FDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 0391
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: Kde4fRoMFlzDrc3yoPqzBflrhkMzP/DGj377aMjAoys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:76:1d:88:27:64:51:a4:16:70:62:52:01:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=ebe6e3944571c6c1c9fe3a00c03a73cf2b14eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:85:d2:1c:ae:ad:21:3a:10:77:9f:63:b6:
9c:b7:a9:40:35:99:bf:16:7b:36:0f:cd:38:34:34:
9d:79:b7:41:fc:1d:19:f0:27:9b:58:74:86:c2:6e:
cd:c8:50:9f:88:bf:35:59:0a:12:51:aa:4b:80:56:
ba:51:82:fc:92:36:d9:44:67:85:87:d1:de:40:3c:
09:a1:e2:3a:35:30:88:28:01:58:7f:a4:45:ee:c7:
32:5b:61:d4:0b:14:f5:51:90:9f:29:38:e2:57:31:
09:e3:2e:47:c9:ca:89:c2:e0:fc:58:48:9f:fe:19:
79:f4:92:08:3b:19:ae:4e:02:21:ef:1d:b6:2e:12:
8a:58:00:88:24:f7:96:80:c5:e8:3c:df:af:2b:af:
f0:24:17:e4:b9:06:7e:d9:a5:bc:66:98:41:62:ff:
b1:8e:1e:73:00:ab:8a:44:68:c2:2d:69:6c:16:39:
5e:83:d0:4f:e6:74:3c:20:95:a7:f2:7b:fa:18:dd:
78:15:b1:55:46:d3:41:08:84:fe:76:00:d3:91:f1:
61:29:fc:59:51:c1:41:39:06:11:64:28:23:d5:70:
36:84:c1:e9:b1:6d:c8:14:2b:17:53:5a:d5:01:85:
3e:37:16:e7:d3:fe:0a:2c:fc:14:df:d9:26:dc:00:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E6:E3:94:45:71:C6:C1:C9:FE:3A:00:C0:3A:73:CF:2B:14:EA:E6
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:4a:f7:00:a4:c8:b8:f4:66:ad:05:dc:c8:d2:9a:d7:ae:
4f:ce:ed:c6:0c:3d:ba:05:76:67:1a:8d:7e:bb:45:a4:10:93:
91:2c:f1:87:2a:1f:82:d7:60:4b:07:2e:f8:28:6a:dc:c5:02:
f6:71:9b:3e:6e:81:67:5e:1f:d8:33:8f:d1:e8:f1:96:b7:8a:
39:34:99:29:2a:d2:51:e0:09:ac:96:ef:8c:6d:9c:b9:18:79:
54:32:68:d2:cf:9a:39:cb:47:df:72:8f:a0:bd:3f:99:3e:a3:
8d:fc:87:fe:ee:b0:f1:51:93:d9:20:9b:e7:ab:6e:de:ad:d5:
5d:79:09:a4:19:a9:f4:c7:b8:be:d1:be:21:f6:a0:b9:4d:54:
3b:23:b2:09:a7:29:45:7a:95:e1:20:a2:2e:69:16:43:48:89:
66:c6:b2:ed:d0:ba:7e:6d:51:4e:89:67:e8:3a:41:c7:7a:0c:
64:f0:37:fd:3c:7e:da:9d:50:91:4f:7a:13:06:79:46:d9:e2:
eb:a9:42:0c:f0:5e:ce:b5:28:d6:87:99:68:5d:a1:3e:ea:f3:
c4:05:18:e8:2e:e6:75:ec:83:35:43:cc:9e:76:50:ab:de:5f:
ae:6b:d0:a9:7c:1b:f0:ba:da:c2:0a:77:ce:44:bc:fa:20:aa:
40:b0:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:44 2025 by rpki-client