Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: Ztfsh+EaakgZV/gFs/g3G9UhIrA/yyRNOMhbIMfgd10=
Subject key identifier: 35:E4:6C:AE:EB:33:D8:E1:79:74:C5:EB:F3:0A:15:04:50:AF:65:CD
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019857FD117D44B31613D7D8937CAFEE8037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 093D
Signing time: Tue 29 Jul 2025 21:00:59 +0000
Manifest this update: Tue 29 Jul 2025 21:00:59 +0000
Manifest next update: Wed 30 Jul 2025 21:00:59 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: O+pyBy/HgvTEFL3XAKpQ6QAt3S1RRcjJbBoFrWdKheo=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fd:11:7d:44:b3:16:13:d7:d8:93:7c:af:ee:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jul 29 21:00:59 2025 GMT
Not After : Jul 30 21:00:59 2025 GMT
Subject: CN=35e46caeeb33d8e17974c5ebf30a150450af65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:9a:2c:34:16:1d:c0:bd:74:b4:59:87:85:
cf:68:ea:ba:15:46:03:76:9a:b4:62:f7:0b:26:1c:
4d:8b:c8:94:be:b5:83:c8:a7:f3:5a:a8:2c:b3:67:
ed:4e:d8:01:8b:41:c0:af:a8:a1:c0:7d:2e:a7:0a:
9b:13:a8:1a:99:9e:08:e0:ee:c5:e6:88:25:bc:ab:
bd:f3:c8:cc:6e:4a:20:ce:64:58:5b:d6:1b:2c:ba:
50:0c:84:49:6c:1e:fa:96:9f:35:94:56:71:14:3e:
fd:b0:93:47:fb:f2:17:3e:e8:be:f5:ec:95:af:87:
55:8f:d8:c7:07:cc:12:b9:f2:fe:be:3b:6d:b1:71:
31:36:e9:d0:37:f1:82:a3:6f:eb:d7:ed:ea:a9:95:
2c:e7:b4:b9:0c:8c:43:ad:58:9c:31:20:88:83:65:
41:5f:d3:bf:92:e4:71:e6:32:3b:76:cd:90:5e:69:
8e:a6:25:09:b4:1e:1d:d6:f8:57:df:97:67:3c:84:
56:1f:2b:78:77:d0:93:ee:75:11:d8:dc:72:f1:e4:
b3:4a:c4:da:98:54:20:47:79:dd:15:ca:3e:68:3d:
4c:49:a2:34:74:f6:fe:ae:96:c6:a4:7a:21:64:f7:
8d:8d:e2:3d:66:43:96:e8:d9:fe:27:5f:39:a2:f5:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:6C:AE:EB:33:D8:E1:79:74:C5:EB:F3:0A:15:04:50:AF:65:CD
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:81:2e:6f:82:cd:2e:42:c1:24:bd:fd:2b:65:9e:6b:7f:1d:
14:0b:35:fe:f4:bf:05:99:37:41:7b:3a:b9:b4:c6:a1:34:2f:
bd:d7:72:7a:ec:f5:d7:2d:62:3d:c9:fe:50:7f:21:59:fe:ca:
3d:a3:3d:fb:42:18:48:67:aa:4e:e0:6b:e1:b7:bb:d8:8d:cd:
c4:2a:0d:f5:f7:10:9e:06:15:16:b7:64:32:4e:80:6b:af:4e:
81:1e:bc:0a:e1:a1:47:ee:92:1f:85:d7:60:f1:63:03:39:75:
01:ef:33:17:eb:d8:98:73:28:2d:bf:5c:46:fb:e3:f8:ba:f0:
80:59:85:80:18:59:36:1d:f1:32:59:6b:74:d7:91:72:e1:8b:
ed:d5:f5:f1:3a:fd:2d:b0:92:dd:42:c9:bb:c9:8f:69:6a:30:
b8:60:ed:35:9e:d2:24:0a:0c:d6:65:1e:e1:b3:06:c1:b7:0a:
e1:34:2d:15:37:2b:ca:b3:fc:57:c8:62:2a:ac:d2:5f:62:cf:
f2:b6:4d:0f:ac:b5:80:40:48:8a:58:ca:7b:c8:a2:e6:02:81:
31:f9:43:c3:b5:fe:61:b4:cc:ed:12:c0:22:9a:d7:cf:eb:81:
e0:ae:ea:da:b2:e7:59:66:8c:f6:c2:02:5e:c5:53:35:bc:6d:
91:fd:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:35:26 2025 by rpki-client