Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: fKR+vK+3kzT7pCNOBZuCsVASOylGIG4/pI8IXVBBFks=
Subject key identifier: CA:96:4E:85:88:59:05:8C:D0:F7:F6:0E:9E:41:B5:AC:D9:37:8A:E5
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01988FC6DAFBBACB5CD760DE873D445C7930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0838
Signing time: Sat 09 Aug 2025 17:00:30 +0000
Manifest this update: Sat 09 Aug 2025 17:00:30 +0000
Manifest next update: Sun 10 Aug 2025 17:00:30 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: hIIqepi7OH95IooH1vIeF/85rdcd4tSYaoqkqGoXBKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:da:fb:ba:cb:5c:d7:60:de:87:3d:44:5c:79:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Aug 9 17:00:30 2025 GMT
Not After : Aug 10 17:00:30 2025 GMT
Subject: CN=ca964e858859058cd0f7f60e9e41b5acd9378ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:6a:27:c7:dc:e6:6c:3b:6a:63:0d:46:38:
db:ef:f5:a1:67:95:d9:79:a2:cc:d9:71:1e:e4:95:
34:8e:2c:9f:2d:d4:03:20:9c:19:8b:6e:c5:e3:a7:
bb:72:87:80:86:a2:b9:0a:18:a9:d4:30:37:46:e5:
09:18:9a:fa:19:a4:48:33:3a:ed:69:ad:9b:e5:61:
72:f8:28:5e:79:e0:bf:57:24:35:61:66:ac:c6:e9:
f3:f7:03:97:c2:f3:1f:f8:67:14:c9:2c:f2:7e:b9:
3b:33:d8:ad:49:8f:b0:d7:20:bf:a3:22:86:cb:a6:
3a:f5:a7:9d:8f:90:b8:3d:fd:d5:4a:0e:51:53:7f:
a5:c8:21:19:66:62:0c:57:76:b0:3a:1e:29:1f:63:
ba:08:9a:6d:cd:f1:ab:d4:ce:80:18:e7:33:26:d6:
2c:83:8e:00:06:e6:0b:1d:6d:df:71:3b:3a:d1:e2:
dc:11:83:d6:19:e7:93:0c:79:43:a5:18:36:3e:53:
9e:f9:9b:af:1f:88:2e:03:cc:81:7a:d8:98:7c:62:
42:01:9b:e1:be:96:05:f3:9f:24:37:33:53:c7:60:
76:52:08:b8:5b:8a:57:4f:e6:de:58:0d:50:d0:3b:
8e:89:ca:29:57:11:e3:a9:14:11:dc:e2:ff:be:a9:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:4E:85:88:59:05:8C:D0:F7:F6:0E:9E:41:B5:AC:D9:37:8A:E5
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:96:c2:be:98:22:3f:7d:34:ab:ec:67:f1:eb:91:c2:db:a1:
0b:92:d5:6a:fa:75:c1:c8:46:1a:43:71:66:16:90:d6:86:f7:
28:93:e5:62:ad:31:3c:9d:8f:2a:a8:bb:23:04:bd:34:db:92:
c0:e4:ad:95:58:79:f7:a5:89:6b:3a:cc:fa:cf:63:21:6f:6c:
44:b3:2e:bc:a9:76:bf:41:f1:cf:65:0c:be:ed:1a:3b:cd:94:
98:a6:5f:13:37:4d:6b:68:04:3e:81:49:06:1c:81:99:91:7d:
ba:55:d6:9f:42:0e:00:01:5f:55:f7:03:34:4c:11:50:38:24:
40:cb:6a:dc:2f:6e:82:b0:65:06:3f:b6:4e:08:16:aa:a0:f5:
f4:fd:ac:e4:2f:28:51:04:80:a8:ae:cc:c6:f2:87:e4:a0:2d:
ed:7a:5d:5f:6c:c3:f0:5b:e6:70:ea:96:fe:33:0a:8d:60:22:
60:f5:9d:49:33:80:60:39:02:51:d2:20:33:65:ca:e3:e1:b6:
aa:d9:46:b1:a6:cb:fd:7c:2e:fa:80:ba:40:19:6b:e5:f7:7f:
71:c4:a7:7a:c5:50:a9:da:de:13:95:55:d0:17:37:73:b1:f5:
0b:c4:3a:2f:d2:13:57:fa:77:c6:cc:17:f4:9a:c2:1b:c7:98:
4e:51:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:12 2025 by rpki-client