Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
File: JQfjIVuSyGWOv0lfa4fOC6anvSc.mft (raw, json)
Hash identifier: r0My+llntH3Ubnx/RbNNa/Nt6a87w052y57tik5H2rI=
Subject key identifier: 75:52:B3:C1:C2:4B:61:75:B7:3F:A0:62:22:27:8A:C5:8F:29:F7:5C
Authority key identifier: 25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27
Certificate issuer: /CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27
Certificate serial: 01984A0A5EFEF2383A32D3E77911D77E9460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
Manifest number: 07A1
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: JQfjIVuSyGWOv0lfa4fOC6anvSc.crl (hash: hANeJVrd4jAEit+CjvStu3TkbQZqc5u3hh63BPgx5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5e:fe:f2:38:3a:32:d3:e7:79:11:d7:7e:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=7552b3c1c24b6175b73fa06222278ac58f29f75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:bc:f6:0d:f8:2f:e6:df:94:ce:cd:4c:2a:
6b:43:d8:72:39:5b:8b:ca:c0:99:9f:7e:e0:8b:54:
f4:26:a3:f4:b4:76:85:fd:e4:b4:ae:dd:7b:3a:a7:
7a:34:02:e0:2e:85:c8:0b:c7:69:15:94:17:43:35:
68:7e:79:48:f6:e4:74:75:6d:50:ee:fb:15:fa:d3:
57:6d:66:d4:d4:ea:b6:88:f3:d6:fe:5f:0b:ad:87:
8b:1a:36:d0:97:ef:9a:29:e3:54:73:05:3a:6c:c9:
72:84:e8:68:67:70:28:3c:33:aa:94:fa:5d:d4:fc:
5c:6a:a6:79:21:f9:71:b0:b0:72:3f:5f:51:83:be:
60:48:16:d5:54:9c:54:f0:ea:90:69:c7:da:61:a7:
83:46:64:f8:ab:3b:c5:be:dd:b3:93:47:fb:4c:cf:
a0:7a:8b:04:71:82:3a:f8:6e:ac:d0:5a:b9:2b:25:
6d:3c:25:64:dc:f2:dd:e4:b2:ad:a2:eb:bc:a7:2b:
38:30:f8:e8:f3:34:d5:72:b7:de:fe:76:a8:27:bf:
f5:7c:43:4b:6d:86:24:52:c7:4f:45:e8:c6:6e:37:
01:0c:dd:73:2c:ac:83:87:eb:79:2c:b5:0c:59:2a:
d9:7c:06:d9:95:36:82:bc:56:0b:f4:c7:20:20:0e:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:52:B3:C1:C2:4B:61:75:B7:3F:A0:62:22:27:8A:C5:8F:29:F7:5C
X509v3 Authority Key Identifier:
keyid:25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8f:87:a8:14:f8:c4:da:86:ef:4c:5e:1a:4d:7f:c1:0f:7c:
61:e2:1a:e8:57:83:cf:5c:f9:e7:2d:ee:74:78:80:a8:80:d3:
ab:4c:4a:c0:3a:75:f0:2a:28:ff:52:5a:29:60:24:5f:a4:a7:
a6:50:41:91:61:2a:90:5b:e5:1c:2b:b5:34:04:43:96:cb:43:
37:b6:5d:ed:70:83:93:d5:c2:32:d2:6e:36:bc:c3:0b:c8:b3:
2b:cc:9b:b7:39:d8:65:55:03:f1:e2:76:fa:f6:bd:b2:8b:1c:
68:33:1f:a7:db:52:d8:02:39:61:e9:9b:8e:0a:18:c7:c6:11:
33:74:41:5c:30:12:c8:be:1a:60:37:04:fb:31:e7:58:4f:ec:
10:8d:91:d7:8d:c0:fb:43:69:8d:b8:9d:36:7c:f1:6c:83:da:
f9:a8:4d:5a:b7:84:d3:bb:31:0d:82:68:4a:37:27:f5:b0:85:
5b:40:53:f2:e7:37:b9:d5:68:db:da:da:20:ac:e8:95:38:9b:
cd:16:7b:c3:a0:2a:0c:9f:11:67:b0:e1:be:f7:24:12:0e:23:
59:8d:79:31:1f:c5:13:35:f7:42:5e:fe:c6:16:35:23:b4:34:
75:a5:25:ad:3a:30:ea:72:72:96:bc:91:49:ce:55:f3:ee:65:
4d:31:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:11 2025 by rpki-client