Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: HWjiVeIzn0mssTIY/AtdlpQnfU0hEshore4ElOyi7qw=
Subject key identifier: 04:82:3F:B2:83:7A:38:AA:6F:68:B5:2D:EB:CC:F1:C1:9A:22:33:4F
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 019894B72B4058E435391357F03AADA09642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 0E05
Signing time: Sun 10 Aug 2025 16:01:28 +0000
Manifest this update: Sun 10 Aug 2025 16:01:28 +0000
Manifest next update: Mon 11 Aug 2025 16:01:28 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: cmaRtpjCJkPpUTLkmP6BOMIrW9mENTkF2DHnz60e8PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:2b:40:58:e4:35:39:13:57:f0:3a:ad:a0:96:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Aug 10 16:01:28 2025 GMT
Not After : Aug 11 16:01:28 2025 GMT
Subject: CN=04823fb2837a38aa6f68b52debccf1c19a22334f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:61:d2:0c:c4:1d:a2:a4:cb:e8:b5:2c:41:
b0:d7:7f:0b:4d:2a:a5:99:69:84:3a:a2:16:6b:04:
cd:30:36:e1:26:4c:23:74:cd:6c:e4:e1:8d:51:0d:
9e:94:08:92:8e:db:67:12:ae:e2:02:ca:e7:ed:50:
3d:45:46:5c:5b:59:1e:37:19:24:88:21:d4:b3:ee:
a7:3b:49:33:09:a9:47:fe:aa:ce:a0:d7:0d:46:81:
dd:31:bf:3e:fc:9a:b0:83:69:28:f3:d7:c8:18:79:
fe:8d:a7:e1:fb:31:76:d0:6f:b6:55:62:5e:a7:79:
00:49:13:29:a5:53:58:6c:8d:e3:4f:92:dd:c8:81:
04:f0:6a:db:fd:ba:68:e3:e8:80:1c:3f:93:1e:e5:
3c:a6:0f:87:76:d0:b2:1a:4b:c1:8f:b8:36:b2:47:
dd:0a:89:33:c0:03:4f:52:ca:c4:cb:10:40:da:e0:
90:ac:76:d5:a3:36:7a:d3:07:1c:0c:0b:79:b3:ec:
e7:a9:84:2e:64:ef:0c:7e:37:60:b0:6e:f7:cc:0c:
f5:7e:a2:24:e8:35:49:b4:29:a6:16:6e:3f:e9:1e:
87:eb:96:63:b2:c8:8b:16:dc:2e:d7:88:80:17:e6:
75:4d:c1:d8:4d:89:01:1f:7b:2f:0c:bb:fe:52:8f:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:3F:B2:83:7A:38:AA:6F:68:B5:2D:EB:CC:F1:C1:9A:22:33:4F
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2b:6f:ac:92:eb:80:ee:8d:a6:6a:7e:9a:30:1f:8b:65:c5:
c6:c6:d7:1b:3b:d6:26:5c:c4:e4:26:ec:f5:5f:76:ff:d3:ad:
40:3d:a6:e8:9f:bc:c1:1b:91:8a:b7:79:2c:d8:23:b3:42:8c:
34:9a:cb:e8:7d:fa:02:20:c3:96:a5:d1:0f:08:b7:74:bf:ce:
1a:d5:9e:54:f3:ef:4b:4f:a9:2f:45:0e:30:5f:41:61:1b:34:
33:a5:0c:f5:63:c9:4f:92:7f:ea:df:81:a6:a4:c2:6d:bd:e7:
20:f2:af:1a:89:8c:5f:8b:00:d1:36:60:72:2b:a1:8c:bf:89:
fd:23:52:c6:c4:ed:d6:b6:23:db:77:37:88:a8:30:2f:05:21:
0e:47:66:4d:7a:a3:84:c7:cc:7b:a6:b3:cd:93:ba:54:1b:1e:
1a:40:9e:16:c7:ac:e8:f8:6b:ea:f0:d8:c4:85:75:38:ea:2b:
20:51:bd:07:ca:06:c5:ee:a1:02:b4:b3:24:b0:49:f7:ea:d8:
1b:bc:85:de:93:ae:12:81:d7:d4:df:b0:21:b6:56:d7:3d:b8:
58:da:4f:26:f9:62:72:8d:90:b9:26:f8:67:c6:e1:ab:58:6f:
e2:bb:d9:5c:c0:bc:ab:6f:a1:9c:95:8d:57:c0:8c:5b:2b:4f:
d9:ac:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:13 2025 by rpki-client