Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: r6DTJhAJPF3AgDkwaZCOXmtoZeZnDfjSY6A3FthLVYE=
Subject key identifier: 91:BB:C9:52:60:6F:0F:C9:EB:5F:D3:97:E3:3A:09:D6:76:E9:B2:83
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019880C2732EA6150660197E143459854178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 0F4F
Signing time: Wed 06 Aug 2025 19:01:23 +0000
Manifest this update: Wed 06 Aug 2025 19:01:23 +0000
Manifest next update: Thu 07 Aug 2025 19:01:23 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: ocQDlinTrnyS2fSOqxwjnMkJeBZZ4MU1F5qsK6TOcEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:73:2e:a6:15:06:60:19:7e:14:34:59:85:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Aug 6 19:01:23 2025 GMT
Not After : Aug 7 19:01:23 2025 GMT
Subject: CN=91bbc952606f0fc9eb5fd397e33a09d676e9b283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:d3:83:1c:92:ff:a7:af:15:05:a4:eb:03:
e0:5c:25:e2:82:ba:0b:09:1c:01:9c:7b:03:7f:36:
10:b0:a1:82:bc:3d:bc:90:e4:3b:d7:fc:41:4d:4f:
6b:c5:50:5f:19:34:a6:58:7d:72:9b:4e:fb:2b:9f:
54:e1:51:1f:68:8f:49:b2:39:2b:d6:82:af:cb:e1:
6d:13:85:78:e1:ed:a4:c8:6b:1a:77:b5:9f:f5:d3:
93:2b:b7:b6:dd:9b:2d:5e:a2:98:f0:bb:59:68:fc:
2b:14:84:59:c9:f4:f6:5c:b0:2a:4c:51:a3:65:ca:
bf:6a:81:ef:f1:06:e8:cf:78:e5:37:e4:24:ee:cc:
d1:30:3f:66:9c:a5:e2:48:25:66:91:e7:c4:fa:bb:
9a:10:3b:7a:72:cc:a1:b7:10:f6:53:20:ab:bc:67:
00:e6:c6:4d:fd:fc:3c:f1:13:40:85:8d:31:83:63:
90:6c:4a:80:bc:a6:6d:22:f5:5b:f0:b7:b5:38:c0:
28:49:5c:be:c0:0c:30:8b:79:f6:d2:9b:a8:8f:27:
47:4c:05:d7:93:20:7c:23:3d:45:4e:d9:db:2d:82:
ea:5f:15:7a:51:66:a5:db:40:90:bd:f4:2c:fc:e4:
cd:f3:f9:2d:73:4f:5a:92:28:c6:e4:a7:4a:f7:6c:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:C9:52:60:6F:0F:C9:EB:5F:D3:97:E3:3A:09:D6:76:E9:B2:83
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fa:2e:78:56:38:ce:b5:35:e9:65:9e:e9:06:c0:7b:dc:d7:
ed:e1:f6:a3:0a:2f:67:00:dc:7a:17:87:ea:f2:09:14:29:07:
51:77:c8:2f:46:5b:8e:64:aa:46:06:b4:29:dc:aa:b4:f0:48:
d2:6d:96:c2:19:e8:0d:d1:c6:28:01:02:94:68:c4:50:77:b1:
cd:21:c5:12:14:35:d4:fa:15:e8:d7:28:88:ba:15:3a:5b:78:
ac:87:31:b7:fd:1f:ff:b4:5c:c5:9f:98:fe:71:c2:00:2b:0d:
ec:3a:ef:2b:05:35:42:5b:12:2f:c5:38:16:1e:31:2e:66:77:
33:3b:33:1b:c7:24:a6:9b:05:84:cf:a8:15:6a:ea:cb:a8:a5:
cd:e0:4a:b0:b8:61:cc:dd:3e:21:a6:3f:2d:28:8f:00:48:c9:
f0:5e:36:de:ee:ba:ef:da:99:a5:ba:d0:14:3f:a7:36:47:53:
dc:9a:e7:b1:6f:c8:51:1e:78:3b:24:5c:3c:11:57:51:b8:34:
78:f3:c4:c0:44:50:e5:27:ed:1b:5d:d5:b9:30:8c:17:f4:be:
77:84:d1:4e:e4:80:8c:91:21:6f:45:5c:2a:db:e0:f9:45:4c:
37:75:57:c1:f6:8f:0d:b7:9f:61:55:5d:34:c8:57:cf:4a:67:
c7:cc:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:15 2025 by rpki-client