Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
File: jR3ulkqib4m9ECJ21GVjP7guqig.mft (raw, json)
Hash identifier: zTGDK5Q1jEerrGRigNAB6T+sUa5PC1bQkIF7CG+GlYw=
Subject key identifier: 0D:DC:27:04:CE:76:D7:FD:89:DB:BB:D2:A5:0E:D9:DC:16:67:BE:ED
Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Certificate serial: 019889C50B1C487DB9F39D40ACC89CB5BFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
Manifest number: 0A82
Signing time: Fri 08 Aug 2025 13:00:48 +0000
Manifest this update: Fri 08 Aug 2025 13:00:48 +0000
Manifest next update: Sat 09 Aug 2025 13:00:48 +0000
Files and hashes: 1: jR3ulkqib4m9ECJ21GVjP7guqig.crl (hash: J/qFdDjbo0qfw2ChSo3fNtfvinNrjUZOpdOrVsyUNTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:0b:1c:48:7d:b9:f3:9d:40:ac:c8:9c:b5:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Validity
Not Before: Aug 8 13:00:48 2025 GMT
Not After : Aug 9 13:00:48 2025 GMT
Subject: CN=0ddc2704ce76d7fd89dbbbd2a50ed9dc1667beed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:1e:7a:5d:93:e0:15:63:6f:a1:9f:41:58:
1c:e7:a1:ae:bf:95:d8:ad:2d:16:62:e7:9b:b0:bf:
01:f7:a7:8f:52:63:a4:44:da:3c:e7:4c:bb:3d:76:
aa:3b:9e:77:74:f4:e7:b8:24:9f:65:e2:38:fc:24:
d3:59:a6:bf:d2:28:07:3e:7e:d8:e5:f4:72:93:c0:
1e:08:45:12:ca:34:be:76:c3:65:d0:2b:8c:40:0b:
2e:08:8d:19:1e:9d:fa:77:ea:e9:fd:89:13:83:2a:
ba:87:c6:5b:96:a8:ef:df:8b:4d:db:b1:98:fe:ee:
18:7e:01:6c:44:03:7b:2f:2f:df:af:29:6a:26:d0:
3d:d2:18:8f:b5:78:24:8f:d2:51:15:b1:62:3c:5a:
5e:b2:ad:96:d1:a8:51:c6:c5:e8:06:fd:4b:86:9e:
db:4b:02:53:c0:e8:b2:e6:54:17:8d:a0:47:48:d7:
d0:d5:94:e5:7f:3c:af:37:80:e4:75:d2:00:7d:f1:
15:4d:92:fa:ae:03:07:2e:ee:c7:54:ad:1e:6d:3a:
68:4a:31:73:2d:7a:65:2b:d1:0b:37:a3:50:1b:69:
e2:ab:94:9f:c2:f1:b5:32:32:04:57:56:13:d8:ad:
af:48:0a:63:a9:01:a5:f1:ed:29:e4:7a:2c:cd:32:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DC:27:04:CE:76:D7:FD:89:DB:BB:D2:A5:0E:D9:DC:16:67:BE:ED
X509v3 Authority Key Identifier:
keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9e:d4:66:28:61:0b:43:a0:7d:9d:c8:26:44:62:8d:6e:34:
3a:ea:03:2c:61:3b:12:91:cf:3b:f9:c4:61:7a:28:10:04:b6:
e3:c4:f8:a5:33:f7:6d:6a:81:3c:f9:95:98:f0:cc:5f:b8:05:
7f:00:c5:ee:3a:31:02:ea:99:c1:4b:26:2f:00:87:38:ce:24:
bf:79:4f:3e:c9:3e:0e:d7:89:b2:84:30:85:46:0d:48:ff:43:
d7:99:a8:83:de:24:28:55:79:dd:01:4b:30:42:49:01:ef:4f:
b4:c8:ee:be:9e:62:d5:2b:dd:fa:7e:e1:d0:ed:2f:24:b7:23:
de:e1:01:94:f4:6d:49:73:44:60:43:e0:60:cb:42:d5:16:d3:
ce:05:f5:74:68:02:e3:7e:89:a7:60:27:44:6e:2a:e4:99:a5:
1b:7c:0e:9d:36:1c:d8:ba:2c:3f:8c:cb:e9:9e:25:65:50:7d:
3a:66:bd:41:dd:79:40:15:6a:5d:e3:3a:6e:61:50:de:45:5a:
fc:cf:a7:f2:98:35:79:68:72:7f:51:80:e0:92:32:70:d3:3e:
7f:cd:74:70:26:36:d9:8e:9c:e8:29:e5:df:a8:3e:fe:d3:c9:
84:12:e9:c5:be:01:29:4e:4d:42:4a:17:54:9b:dc:04:c4:a8:
b3:14:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:31 2025 by rpki-client