Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: 6wEaYsQobCQYLakmHjdEduvRrAFgzq2xZQfN+rIntQc=
Subject key identifier: 0B:04:DA:32:11:66:94:79:55:0B:2C:30:E7:F0:49:EB:92:70:81:42
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 0198730691EEFF09169EDDCCD8E8145A8CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 03:01:07 +0000
Manifest this update: Mon 04 Aug 2025 03:01:07 +0000
Manifest next update: Tue 05 Aug 2025 03:01:07 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: DYLpBNQ0ki99PmGalWyXbn0hpf7pA/BjZ7H62Ulig0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:91:ee:ff:09:16:9e:dd:cc:d8:e8:14:5a:8c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Aug 4 03:01:07 2025 GMT
Not After : Aug 5 03:01:07 2025 GMT
Subject: CN=0b04da3211669479550b2c30e7f049eb92708142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bc:34:9b:06:67:84:05:56:0a:f8:cb:f7:22:
d2:a6:6a:da:9e:fd:58:37:07:7d:6d:d2:7c:06:08:
ba:a6:ec:8d:8b:c2:82:10:4b:d4:52:f9:4f:0a:9b:
60:9e:8c:ef:c4:3a:43:0a:68:8e:05:d1:e3:23:4a:
1d:9d:fb:92:f6:aa:c1:9b:b0:99:09:ad:b9:a6:8d:
42:9d:33:87:42:4d:59:d0:10:00:08:fb:09:4e:ad:
f4:a1:1b:8a:eb:70:be:fe:1a:b8:ec:8c:f4:5d:c6:
24:d0:45:98:f9:a7:f5:10:2b:88:48:3e:5c:e9:63:
b5:11:af:db:d8:28:56:41:99:8c:26:96:ff:65:51:
23:c7:85:62:0b:01:84:07:b3:94:6b:ef:e5:1a:45:
f5:8d:11:1b:98:ee:39:b1:d0:ea:0b:5f:25:62:ce:
9c:53:53:2c:f5:b8:be:3b:5e:94:91:7d:dd:6d:c6:
75:2c:86:f2:14:c6:49:a6:51:80:77:32:e5:3d:a7:
f5:b8:1b:b0:76:19:c1:81:71:db:e7:a6:bd:f4:c9:
1c:60:66:56:75:c8:b3:bb:6a:9f:12:e3:73:e4:c2:
f5:b2:32:87:73:49:84:c2:df:e6:1c:70:0d:4e:55:
76:df:54:4a:f5:f7:d9:80:23:0f:18:1c:2b:32:56:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:DA:32:11:66:94:79:55:0B:2C:30:E7:F0:49:EB:92:70:81:42
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:07:d5:09:45:29:d5:4d:10:c0:62:bb:c9:e3:22:7e:42:
41:96:8d:46:09:54:94:b1:cf:07:4d:3c:4c:e6:df:ec:5c:b7:
61:2b:c2:9a:1b:a3:f9:76:9d:6f:66:7d:02:f4:e6:cc:f6:3d:
e9:87:9b:38:69:87:30:c7:9f:bc:5d:ad:67:7a:dd:6f:a5:a2:
99:da:6a:d9:b7:1c:3f:f2:ac:c9:ab:96:cf:94:a9:1f:1b:c7:
c3:ed:3f:c9:d1:2a:95:28:23:cf:53:03:7a:e6:25:54:57:70:
96:b7:13:fd:32:85:c0:4f:d2:38:29:fe:71:21:c9:a8:22:72:
c7:74:b3:20:94:12:6d:01:f1:4c:46:43:49:cd:06:7b:a5:17:
99:31:b4:06:f6:1f:8f:06:14:7c:27:db:4b:89:03:4b:b1:e0:
7f:05:8d:7e:28:95:6b:a8:a1:6c:b8:ba:0f:dd:e4:f2:85:aa:
97:06:88:9a:eb:fb:84:54:ba:68:df:b1:d2:e7:14:f5:03:5c:
1e:40:ee:5e:7b:41:4a:c3:22:47:29:73:d6:bc:af:bc:37:a7:
3a:e2:4d:72:fe:bb:37:87:fe:2e:d4:2a:0b:59:15:7e:69:70:
de:9e:f9:e6:9d:14:28:b7:16:42:57:92:d2:35:c1:06:34:68:
39:90:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:51 2025 by rpki-client