Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier: 1JbpreOBGI9ITezyA33srPtrNEKGFGeObm4eJIwbIGE=
Subject key identifier: FB:1D:81:A6:A8:3A:A0:F1:BB:F5:19:37:3F:FB:71:A6:B0:3C:83:E7
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial: 0198733DBC4163212FC0D122070E964AB52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number: 06A0
Signing time: Mon 04 Aug 2025 04:01:22 +0000
Manifest this update: Mon 04 Aug 2025 04:01:22 +0000
Manifest next update: Tue 05 Aug 2025 04:01:22 +0000
Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: avZvOQ80lS4821Rdy412abMz5q+gYfj1m4tBA0oLXjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:bc:41:63:21:2f:c0:d1:22:07:0e:96:4a:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
Validity
Not Before: Aug 4 04:01:22 2025 GMT
Not After : Aug 5 04:01:22 2025 GMT
Subject: CN=fb1d81a6a83aa0f1bbf519373ffb71a6b03c83e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:29:63:f8:db:79:c1:cc:62:dd:a5:f9:dc:
4d:52:3f:ff:09:7d:5b:02:db:f9:13:4a:a1:c0:4d:
40:a8:bb:7c:49:b0:74:7e:fa:c6:7f:1c:6b:25:4f:
4b:ca:2e:bb:60:de:a1:a7:15:ea:dd:ec:fa:cb:80:
2a:09:b2:4a:78:8f:3b:5f:52:4b:ec:20:14:e1:9e:
39:14:c9:e9:8e:c5:d1:36:ea:8b:69:89:06:07:9c:
40:7f:d2:13:00:c1:af:63:37:8e:fa:d6:5c:c2:36:
23:ec:00:dc:e6:7d:33:ec:de:88:a5:9c:cb:48:41:
2b:94:62:a4:10:e4:ba:cb:ea:ab:36:f5:cc:84:d7:
d1:f7:43:e5:2a:1c:4c:65:cb:f6:b0:87:9a:93:24:
10:3a:85:a4:df:39:11:35:4e:b6:c5:fc:28:0f:79:
8c:fd:17:8a:b6:aa:1c:fe:fb:e9:5c:b6:5c:25:bc:
bc:ed:de:9f:dc:15:68:60:0f:bf:a1:b4:e1:ca:b2:
18:28:a1:4f:05:88:de:7a:85:ae:84:6d:41:9e:41:
b2:bb:00:00:64:50:2b:26:3d:50:b0:27:75:cf:db:
e9:a7:5d:b5:e7:e6:11:1c:5c:f3:42:88:20:6f:ff:
0e:b2:d8:1e:a7:c6:c5:20:ba:da:e7:8b:82:b6:4b:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1D:81:A6:A8:3A:A0:F1:BB:F5:19:37:3F:FB:71:A6:B0:3C:83:E7
X509v3 Authority Key Identifier:
keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:40:6b:68:09:5c:e7:cd:47:63:55:e7:32:9a:40:27:01:
8b:ef:cc:86:2a:ff:4c:fd:e5:82:69:81:8b:84:2f:f1:19:86:
02:73:03:38:e0:2a:21:d4:24:e2:79:ef:20:f5:d5:e3:1b:db:
be:0a:99:da:a0:c4:e6:aa:82:bf:aa:39:8a:1a:c5:3f:74:ce:
b7:da:72:3b:dd:23:31:d5:b1:26:b0:12:46:0d:54:02:e2:5d:
3a:99:80:dd:28:fa:6b:64:68:d8:a6:8d:58:28:cb:ad:60:3e:
6a:53:7a:84:2d:c1:0d:d3:8e:cb:d5:22:9b:0d:18:b7:63:81:
6b:1a:d2:f4:47:a3:76:ea:d6:ce:6a:60:b4:96:26:6f:29:b2:
d3:8c:02:18:a3:0b:8e:d2:3c:4e:a8:e1:fb:dd:6a:5c:30:a4:
bb:1f:be:ac:cd:a1:21:b6:cb:67:f9:80:da:89:5d:60:18:c3:
dd:e2:4f:19:4c:25:cb:a6:c6:85:53:fc:39:ac:d9:41:1e:2c:
57:fb:2e:de:43:16:88:b8:61:87:0e:aa:5e:0c:03:06:7f:d2:
f7:cd:9e:56:a4:47:35:c8:86:19:5d:c2:b5:85:b2:fe:7f:89:
d4:c7:c7:9a:42:74:c8:f0:96:2f:7c:47:79:1d:67:44:b6:ad:
36:42:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:28 2025 by rpki-client