Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: NqImUrhQJDwrpFtdlxjNMiw6nAZoaqqwJpDWbp72MkE=
Subject key identifier: B6:BF:6C:3D:EF:02:E9:56:CB:0F:A4:8F:6F:A5:66:04:28:0F:74:6F
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 01988F59A23433CB38682387F54C5BB231E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 15:01:12 +0000
Manifest this update: Sat 09 Aug 2025 15:01:12 +0000
Manifest next update: Sun 10 Aug 2025 15:01:12 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: Ipi2P/J6aQ2LuwXU+6MFjHlaa38lRBoXXGVq3WhFfbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:a2:34:33:cb:38:68:23:87:f5:4c:5b:b2:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Aug 9 15:01:12 2025 GMT
Not After : Aug 10 15:01:12 2025 GMT
Subject: CN=b6bf6c3def02e956cb0fa48f6fa56604280f746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:5a:23:33:3c:2c:9e:20:ac:f2:8d:4c:27:
b4:8a:ad:62:bd:a9:63:f5:08:aa:53:40:56:52:d5:
b2:f9:e8:bb:86:30:7d:8f:17:6a:74:ea:12:fe:66:
4b:9d:02:e7:16:5a:45:03:1b:8e:c6:2e:42:e8:16:
ac:88:8e:ba:72:00:e2:c9:98:ee:07:e3:22:53:07:
50:2e:db:f9:5e:79:7d:46:8b:96:b6:73:27:71:a3:
13:4d:dc:6f:5d:80:7a:f8:d4:12:c2:70:e9:2f:2c:
aa:39:02:49:f0:d8:3b:3a:b6:ec:2c:80:36:9a:65:
a3:fe:18:33:f0:94:82:05:12:d8:c6:0c:62:c6:e9:
e6:e4:f9:26:ce:06:63:5d:6f:93:00:b2:87:27:8a:
a0:9a:31:18:ab:3c:9f:33:f8:17:bc:5a:5a:a4:3d:
a9:68:78:a7:5e:96:37:a1:73:0a:ae:50:c7:ee:64:
43:69:3c:44:8d:89:aa:96:bc:a0:78:89:45:a9:eb:
ca:4e:3c:d2:27:a3:57:96:cb:ec:17:95:3e:1b:d6:
1c:36:4e:7a:8f:d6:3a:62:c1:04:ff:11:96:e2:4d:
d7:9f:ec:f9:82:fa:81:17:15:37:31:fc:7a:a2:93:
3b:e5:60:f2:ca:62:07:c6:0c:60:d2:7f:4c:45:6b:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:6C:3D:EF:02:E9:56:CB:0F:A4:8F:6F:A5:66:04:28:0F:74:6F
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9d:6a:7e:6f:2c:f6:92:a4:c1:89:02:22:bd:f9:7a:1e:b5:
e4:bf:bb:76:65:40:7c:c3:89:7f:61:f7:8a:6e:f2:b0:91:c2:
97:3c:42:74:71:c6:6d:f1:51:63:da:a8:73:9f:8a:99:bd:c0:
96:f0:75:30:96:00:b9:6b:e5:f7:f5:fd:c2:07:b0:45:73:1f:
c1:2a:da:49:f2:9e:bf:5d:5c:8f:16:12:1e:83:19:1a:33:dc:
6b:a8:bc:82:1f:80:f2:8c:e1:10:8b:6c:08:4b:b6:21:7a:04:
46:68:db:b2:0f:7c:76:73:84:21:08:4b:d4:5c:c8:1a:4e:f2:
d2:b9:a1:b6:92:c8:ed:b1:71:8d:5e:a2:ed:57:f5:47:b6:5c:
c8:fb:f0:f9:a5:fd:23:24:1f:81:be:a5:22:be:a1:07:ba:d9:
6a:0f:a7:70:ae:3b:f3:58:a1:54:fd:8e:3f:ae:43:91:47:ba:
27:56:7b:b7:e9:f4:c6:8a:7e:30:1f:4d:e4:85:c2:79:e4:ea:
59:f7:84:4d:13:82:7d:57:50:f1:67:bd:77:8d:28:a2:79:82:
4b:90:43:df:12:9e:c6:03:4b:30:eb:75:2f:89:92:34:34:40:
cb:90:ae:b7:59:86:3c:37:e0:46:5c:90:26:f4:d6:17:46:75:
4d:6f:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:17 2025 by rpki-client