Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: nVOiEciZYN6G91MoWT9SXrXK53eAHfDoEC10MtApIic=
Subject key identifier: 7D:D9:CA:CD:79:55:9C:8D:A2:D8:E4:76:38:E6:5D:B9:37:D2:6B:F0
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 019853B1B6F654115073E723665CEA3F2C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 01:00:12 +0000
Manifest this update: Tue 29 Jul 2025 01:00:12 +0000
Manifest next update: Wed 30 Jul 2025 01:00:12 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: 1wEB9bNa0DzcZ/WsRXw/X/n8coVUCX+d5F+7fycVc2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:b6:f6:54:11:50:73:e7:23:66:5c:ea:3f:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Jul 29 01:00:12 2025 GMT
Not After : Jul 30 01:00:12 2025 GMT
Subject: CN=7dd9cacd79559c8da2d8e47638e65db937d26bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:97:24:8a:69:d8:72:a9:90:36:49:f0:17:
25:f4:39:74:fe:ca:ba:fb:74:ba:33:c6:a0:14:e4:
48:d4:32:8a:52:86:b6:10:8d:45:ca:77:fa:d7:22:
13:df:99:12:1c:e7:b2:cc:26:37:cb:f7:b6:a9:5e:
0c:fe:57:a1:35:8d:fa:50:85:73:88:f9:5a:d5:a1:
1e:25:07:44:c9:cf:47:4a:7c:b3:81:31:0d:ca:71:
5a:05:b7:03:d2:56:c8:bf:58:e3:3e:9e:69:8c:3a:
1e:3f:bf:fe:48:81:f4:33:47:b9:7a:af:aa:97:d1:
be:44:bb:1b:04:4d:a9:27:c7:6e:f8:cd:c8:c7:42:
5a:08:8b:d3:d1:b3:16:8e:12:fe:29:06:b1:0f:3a:
7f:83:6a:5c:a0:b2:ab:6f:64:ca:62:d5:ff:b2:83:
21:91:5a:76:bb:7b:45:4b:9b:61:83:b7:8d:b3:5d:
70:39:3f:7c:14:17:72:a5:73:a8:c5:9d:3b:83:62:
19:46:98:f5:2d:ea:28:d5:b1:98:9f:28:a5:d0:e1:
bd:a0:d7:2f:f7:08:14:5d:7d:64:27:f2:83:20:0e:
a3:b2:43:6d:7e:b8:0f:60:45:53:e1:a6:56:b3:84:
c2:7c:50:89:ed:75:96:80:38:92:b6:2e:2b:80:09:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D9:CA:CD:79:55:9C:8D:A2:D8:E4:76:38:E6:5D:B9:37:D2:6B:F0
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b0:3d:c1:15:6e:c6:f1:67:8a:32:7e:0f:cd:90:16:a4:70:
40:15:45:79:79:52:85:d7:0a:99:aa:56:be:03:00:c7:c7:cc:
5a:81:07:91:55:b4:27:d1:c4:32:5e:20:a6:36:1f:0e:81:cb:
7c:0a:fa:d1:83:f4:dd:ef:0e:02:f4:a6:41:38:7b:d8:f9:7b:
cb:c8:3e:19:94:0b:d5:bd:74:33:43:51:cd:dd:e1:d4:ba:67:
1c:97:e5:a4:02:eb:55:76:7a:b0:d9:82:45:d1:6a:dd:32:8d:
a2:93:8b:32:81:2e:37:87:ed:ad:81:90:be:cb:c1:78:7c:f6:
ac:1f:83:97:8f:b3:65:23:d4:0a:34:02:6e:79:d0:88:09:71:
1d:cc:5a:99:af:c3:c8:2a:0b:3e:0b:21:2e:b3:9b:d4:4c:43:
7f:3e:43:09:4e:75:5d:13:6e:bf:09:ab:61:58:d3:b7:bb:c7:
b8:80:e9:c2:99:c2:e1:a6:7e:71:3b:19:a4:4d:23:fe:5b:9f:
f8:d8:47:4d:6a:d5:64:cc:f6:14:39:a2:76:5a:ac:a7:69:fc:
f4:31:53:99:6b:70:c1:89:03:e5:9b:c7:90:ca:2b:21:42:19:
6d:99:23:39:29:63:ca:06:10:74:13:77:32:71:d6:3b:6f:bd:
84:da:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:27:46 2025 by rpki-client