Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
File: miIdT5cAcYIi7es06TinZjQ_JOE.mft (raw, json)
Hash identifier: fLw0gRrhDEQ5Ql7/DeBGn5+61Zs7QmNlZRLrPHm1xOM=
Subject key identifier: C4:9C:48:EA:0A:55:D0:FC:79:8B:DA:B9:45:27:FE:B8:5D:D5:57:85
Authority key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
Certificate issuer: /CN=9a221d4f9700718222edeb34e938a766343f24e1
Certificate serial: 0198A04ED24EC1426F4802FFE33854160C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
Manifest number: 14D8
Signing time: Tue 12 Aug 2025 22:02:56 +0000
Manifest this update: Tue 12 Aug 2025 22:02:56 +0000
Manifest next update: Wed 13 Aug 2025 22:02:56 +0000
Files and hashes: 1: miIdT5cAcYIi7es06TinZjQ_JOE.crl (hash: Nvq2EwWMisdabxDsw+D7IynZDGN9rLo63SD+gilA9AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:d2:4e:c1:42:6f:48:02:ff:e3:38:54:16:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a221d4f9700718222edeb34e938a766343f24e1
Validity
Not Before: Aug 12 22:02:56 2025 GMT
Not After : Aug 13 22:02:56 2025 GMT
Subject: CN=c49c48ea0a55d0fc798bdab94527feb85dd55785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:1f:2e:b8:f2:2d:ba:8b:fa:e1:11:3c:85:
4b:67:01:93:92:d2:2a:53:ee:8b:cd:53:db:be:a6:
06:43:e9:a8:1c:bf:df:de:12:57:75:c6:5b:31:3a:
fe:a5:fe:63:dd:85:7f:2c:0e:33:28:a6:d7:a7:f0:
c4:3c:05:61:5e:ff:33:15:d0:3f:59:df:28:0e:31:
95:c2:7c:7c:5a:67:a8:12:e3:6a:d1:e6:d0:1e:05:
81:7c:3e:7f:44:71:63:f0:47:04:cf:85:c7:1f:ed:
96:5e:82:54:1f:26:45:01:ab:22:e0:15:85:fb:3c:
7d:da:e1:bc:79:73:da:56:5d:dc:cf:8b:48:dd:eb:
0a:5f:1f:e2:e6:9a:dd:8a:d2:97:dc:a5:9c:a9:98:
47:38:94:f8:ce:ed:11:f2:cc:03:64:71:0b:90:ba:
95:93:0a:d2:10:19:a1:41:6b:d6:76:3a:2e:1a:6c:
91:32:d3:e8:b6:09:33:cf:af:3c:19:e1:b4:b8:6f:
68:3c:93:f2:9f:77:31:b0:cb:ce:ca:f1:e5:e9:04:
54:69:de:20:54:aa:ba:a3:ff:83:95:28:99:81:23:
43:08:e4:17:63:6a:ea:18:53:a5:7a:ba:b0:ce:80:
7b:28:26:0c:c2:f7:0c:0f:3f:28:8b:c1:77:e0:c4:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:48:EA:0A:55:D0:FC:79:8B:DA:B9:45:27:FE:B8:5D:D5:57:85
X509v3 Authority Key Identifier:
keyid:9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:af:5f:63:5e:48:70:ba:40:4a:4a:d2:8b:6d:8e:ec:6b:
45:0b:ee:74:37:c9:bb:90:30:20:91:01:79:c3:2d:20:25:47:
1f:3f:42:90:79:43:89:b9:a7:2a:87:e9:81:97:21:a2:8e:d5:
50:77:00:3c:7e:b7:d2:84:7f:8c:d4:0e:5c:6e:7d:6b:b7:31:
5c:74:04:33:aa:f2:c1:cb:82:27:55:3a:35:96:f0:bf:aa:c7:
0f:bf:d5:a4:f3:d4:66:08:8f:0d:0c:58:aa:40:db:1c:d9:d0:
e4:6c:f9:bc:c5:bf:d7:16:79:f8:c9:ac:b5:b1:f9:9b:11:fd:
a4:62:6f:cb:c6:92:d1:ba:f1:bf:ec:94:7d:55:3f:59:38:0b:
ce:6e:93:09:78:e8:56:02:2c:0c:11:f7:70:92:0d:06:b6:34:
27:09:04:03:ad:da:2a:1b:49:4e:1b:72:e8:d4:a0:be:46:cd:
b5:7d:71:02:76:b5:0d:21:a9:69:17:57:bb:ac:86:17:d0:bc:
f4:7b:8b:06:be:b7:f2:2f:07:b7:7c:93:75:35:87:c5:41:db:
78:91:5a:53:7f:06:ef:0f:cc:a2:ae:3e:c5:55:c6:bc:82:ab:
7a:66:c7:f4:83:7c:fb:ad:27:fb:8c:a5:43:ce:56:b3:20:4f:
82:60:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:30 2025 by rpki-client