Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: PihkWkPLipYCQNuTMqHzhIdWmQBd3l5uafYk4NIFwlY=
Subject key identifier: 3C:DA:A7:50:F9:2E:54:FF:35:A1:F3:F3:DB:B9:22:6E:66:23:6A:E8
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 01989F7116AA49770DE8F33D3D946438EB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: B4
Signing time: Tue 12 Aug 2025 18:00:44 +0000
Manifest this update: Tue 12 Aug 2025 18:00:44 +0000
Manifest next update: Wed 13 Aug 2025 18:00:44 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: B5eu2Aw3W/dM/dF5AstnMQIW2WPH59mknSQ6kTrh0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:16:aa:49:77:0d:e8:f3:3d:3d:94:64:38:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Aug 12 18:00:44 2025 GMT
Not After : Aug 13 18:00:44 2025 GMT
Subject: CN=3cdaa750f92e54ff35a1f3f3dbb9226e66236ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:d7:b7:d6:6b:10:8b:32:5c:1d:a8:10:2a:
fc:6d:90:95:4a:cd:9d:4a:5c:48:99:29:de:18:b3:
84:58:77:b5:eb:07:68:21:d8:2c:9e:00:fb:bf:ef:
67:9d:40:bd:f7:53:1d:f9:3d:7b:68:26:e4:b7:93:
74:e5:68:de:3b:77:68:e7:52:49:a7:57:a6:4a:3c:
72:12:b1:fe:b2:23:85:10:9e:92:f9:fe:62:1b:63:
34:22:7c:cb:ee:c4:c6:e7:d2:f4:e2:ea:69:96:17:
c2:79:f8:d6:48:26:8b:e3:e0:6f:8f:9d:e3:ab:ed:
8c:f9:be:ce:d7:69:ca:c1:b2:2b:59:af:01:dd:a6:
f3:ff:6a:3e:82:c7:70:69:46:9f:40:54:bf:25:3e:
57:34:23:a2:a3:79:bc:97:47:39:71:01:bb:0a:61:
42:4c:a8:10:0d:2f:7d:0e:2f:1b:c1:8d:fb:4d:cb:
8f:60:13:19:a2:45:8c:f0:18:a2:77:a0:db:cc:77:
29:90:4c:31:3b:48:16:50:a4:2b:e0:dc:b1:8d:d3:
5d:07:8e:0f:8b:73:a9:4a:34:05:4e:20:f1:ca:f3:
3b:66:2d:96:25:1c:ef:15:25:b4:36:eb:42:99:0d:
55:6b:0e:be:34:bb:59:7b:4c:cb:89:02:9e:ef:4e:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:A7:50:F9:2E:54:FF:35:A1:F3:F3:DB:B9:22:6E:66:23:6A:E8
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:95:4e:71:15:88:0c:96:e6:43:d3:a8:fd:9a:3a:2a:0e:
9d:12:25:f6:8b:fa:93:e1:7d:fd:ea:cc:4a:12:7a:35:56:47:
72:d6:d0:be:72:35:13:a7:4e:2c:49:d4:1b:70:6d:37:2a:a5:
14:bf:1a:e5:40:a2:81:20:05:b8:eb:b8:dc:58:79:a7:63:0c:
7e:b9:d8:38:35:15:ce:6c:e3:35:d4:14:33:0b:88:2a:7f:bb:
27:e4:95:ba:1a:2b:54:91:3e:e6:02:71:a3:39:74:97:b4:74:
20:e2:48:4c:74:22:49:ea:eb:fd:aa:65:3a:c9:77:c5:7d:4a:
96:71:ae:7e:7f:0d:6f:df:da:45:b4:34:2f:af:57:54:04:81:
19:79:73:95:ea:01:53:51:1c:6c:91:e1:1e:02:c7:1d:f3:cf:
b1:09:2b:fe:d7:5f:54:1b:b9:49:c3:21:1c:fc:57:fd:c3:09:
e1:9b:07:20:e4:a4:53:ff:7f:29:ae:6c:41:e5:93:8a:84:23:
a0:30:70:13:1b:ed:0f:d7:c6:3b:64:15:93:9c:90:d9:e5:a1:
26:be:8c:8e:a5:75:f6:2b:50:70:38:fe:b6:26:b3:26:e1:1a:
ad:a5:07:44:f3:50:c3:e7:10:7a:1d:dd:7d:d1:a9:ab:c0:e6:
c5:11:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:07 2025 by rpki-client