Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json)
Hash identifier: mlqqR+n4HYjGkHzJZiNuvqdKBCifsRBM0pEHC5pf+wU=
Subject key identifier: CA:36:9B:97:89:88:9C:B1:91:B9:9E:66:6A:C5:19:78:E5:48:E3:61
Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Certificate serial: 01988BEAC07132C804BECF13438EF8AB201C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
Manifest number: 19
Signing time: Fri 08 Aug 2025 23:01:14 +0000
Manifest this update: Fri 08 Aug 2025 23:01:14 +0000
Manifest next update: Sat 09 Aug 2025 23:01:14 +0000
Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: 0quv/6Ocj/SGc8dVoaYbW/uusTJ2xajvvAtdjfNJcPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:c0:71:32:c8:04:be:cf:13:43:8e:f8:ab:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Validity
Not Before: Aug 8 23:01:14 2025 GMT
Not After : Aug 9 23:01:14 2025 GMT
Subject: CN=ca369b9789889cb191b99e666ac51978e548e361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:35:e9:21:18:cf:44:53:e9:bb:9b:c0:a8:
6e:ca:39:2e:16:61:d3:e8:40:c3:ed:8e:99:0f:00:
8f:88:14:aa:09:e8:59:a9:aa:9f:50:de:49:bf:42:
47:44:16:70:94:af:d2:51:2c:fe:fa:b0:7f:90:80:
05:c3:c2:09:db:ea:ab:8b:70:dd:ce:93:4b:15:c1:
e4:ed:d6:fb:fc:34:37:1e:c7:5d:91:41:75:10:fe:
b2:3f:b3:5c:8e:a5:09:f1:95:86:e2:52:3a:14:27:
49:5e:be:65:53:07:02:cf:f6:3c:e3:47:fe:7b:df:
da:22:2a:25:d4:43:15:61:c2:1e:83:4a:d5:b1:36:
74:fe:69:10:72:0f:47:d4:72:79:40:53:90:a2:4d:
60:c7:dc:77:58:de:76:d2:93:f2:d6:f3:60:41:5c:
d6:e3:b7:02:71:ed:1f:24:fd:b6:ea:67:7c:79:8b:
1b:c3:42:d0:3d:6d:60:0e:75:d6:7f:69:90:53:b0:
b0:3c:0f:15:3b:08:0f:6d:40:63:e8:e8:45:25:45:
f2:a9:2f:f6:f7:3d:aa:de:72:2e:19:b2:61:2c:61:
43:09:d3:3a:37:51:6e:ca:5f:ca:45:53:05:df:a2:
c2:26:14:8e:a7:be:d0:a7:75:a5:3d:97:6e:99:7b:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:9B:97:89:88:9C:B1:91:B9:9E:66:6A:C5:19:78:E5:48:E3:61
X509v3 Authority Key Identifier:
keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a8:16:f6:93:e7:29:4b:3e:fb:38:22:0b:28:4d:6f:3b:64:
8b:5d:4e:7c:42:15:89:98:be:0f:11:67:cd:6c:6e:42:21:dd:
1e:d0:a3:e7:fb:0a:6f:56:35:6c:69:55:43:0a:85:f7:97:87:
74:ba:76:f8:5e:e0:c3:9e:15:e4:1e:a4:3e:7b:d6:42:3f:50:
2a:e9:0a:32:24:4a:c7:1d:83:4e:a9:21:cd:8a:0a:a2:0a:2f:
99:60:67:6d:69:b4:fd:45:60:8a:c8:d0:c0:4a:e4:ca:9f:4d:
ed:c5:de:a0:c8:40:a3:3c:d5:3e:16:1d:d0:96:a9:71:95:83:
52:20:4b:80:a0:f8:5b:3c:7b:eb:6f:dc:f9:04:88:1a:71:1c:
e5:c8:80:55:28:d2:dd:7c:67:ab:44:4d:b9:ba:18:19:da:f1:
b3:f8:d0:e4:bb:f2:06:42:b2:c5:5b:9b:74:5f:bd:ad:d6:e0:
a9:f6:e5:76:f0:07:1d:5d:8d:90:1a:9a:40:f6:d4:e1:81:25:
ae:b0:e4:1e:4e:6b:c4:08:f7:d2:bc:65:a1:66:9b:d8:17:0c:
8d:cf:f9:97:8a:46:f3:d0:e9:b0:f9:c6:6a:c7:30:aa:88:b7:
09:88:48:60:01:f1:1b:4e:4a:0b:30:44:3e:98:88:7d:01:98:
8f:40:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:48 2025 by rpki-client