Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier: HrEUVamEC/Y1s4sdcxda3486rpgoJKuCz3xQEoI3UtQ=
Subject key identifier: B1:6C:7B:0B:3F:DD:02:3D:F1:E2:0B:BA:FD:0C:0F:8C:F9:CE:EA:19
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer: /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial: 0199CBA3F745A5FC5AE20606B7F4D76E1EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number: 16C4
Signing time: Fri 10 Oct 2025 01:02:24 +0000
Manifest this update: Fri 10 Oct 2025 01:02:24 +0000
Manifest next update: Sat 11 Oct 2025 01:02:24 +0000
Files and hashes: 1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: m9cp471hVjA5ssxw3W4EX2uANkh58zBqrfrBhHdzaFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:a3:f7:45:a5:fc:5a:e2:06:06:b7:f4:d7:6e:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Validity
Not Before: Oct 10 01:02:24 2025 GMT
Not After : Oct 11 01:02:24 2025 GMT
Subject: CN=b16c7b0b3fdd023df1e20bbafd0c0f8cf9ceea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:01:56:24:33:88:24:2d:d6:41:24:cf:5d:
54:33:11:22:fd:7e:e5:05:ce:b1:36:ee:58:3b:5d:
c7:85:8c:8d:fd:ad:2c:71:55:78:00:86:d6:1a:f2:
1f:5e:b2:09:54:c0:51:8c:2e:0e:e4:30:08:e3:2a:
8d:db:17:bf:89:50:97:d7:cf:d6:67:06:36:58:d8:
66:75:c9:5c:41:f2:2b:fc:07:3d:10:3b:77:f3:7c:
72:b5:88:54:6b:55:84:b2:2d:21:1e:5a:b8:f2:e6:
01:75:57:28:6f:72:40:a6:9b:21:af:e3:3e:71:77:
7e:ad:31:5d:6a:06:18:fc:07:ab:31:4f:25:cd:34:
06:d5:c0:df:f7:ed:0e:71:c1:1d:e4:e0:71:ec:69:
cc:61:16:8a:cb:fd:3a:27:c1:77:0a:4c:10:1c:e3:
14:d5:b5:89:4b:7e:f3:ba:38:70:75:42:4a:84:14:
de:8f:af:5d:b1:2a:df:96:60:03:0c:34:00:eb:48:
a2:f1:0b:32:41:f2:3c:c1:de:67:ae:e9:c1:3e:c3:
47:75:8a:80:8d:9c:97:63:c8:86:4b:80:61:d6:ca:
9a:0a:cf:68:7e:b0:b8:a2:1a:94:8a:a0:86:e6:ae:
8c:e5:cc:03:91:79:6f:0a:76:41:33:7d:5e:1b:14:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6C:7B:0B:3F:DD:02:3D:F1:E2:0B:BA:FD:0C:0F:8C:F9:CE:EA:19
X509v3 Authority Key Identifier:
keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:a2:90:fc:f4:84:75:36:a9:14:82:e8:f7:86:3c:6d:f5:
81:8b:74:c2:af:67:e3:5a:8b:e4:de:94:e9:0d:b1:00:cc:c8:
59:8e:f5:63:7a:75:f4:0e:99:aa:10:dc:52:e3:58:8a:18:17:
e8:eb:dc:50:b2:6f:bb:09:75:02:51:25:e7:9e:89:29:c5:58:
29:42:b0:2b:19:a9:14:39:1d:05:99:59:f2:f0:9e:a8:39:f5:
02:0b:73:45:ac:9f:ed:a6:11:3a:9a:ad:f0:cd:6d:ab:ab:5d:
e7:4d:97:59:b1:70:e2:30:96:83:e8:a7:64:4d:94:48:7a:a1:
c8:3d:2a:bd:81:1e:ee:1b:8d:49:4a:93:1f:33:88:21:b8:d9:
5a:17:ab:33:9f:51:76:b3:20:b7:33:15:6a:5c:d9:0e:72:f2:
8d:13:77:76:66:87:d7:4d:30:b3:9d:92:9f:d2:0c:18:20:40:
b0:b5:5d:9e:db:7a:b8:a0:fd:89:09:2c:b4:fd:49:a4:75:2e:
59:5b:18:b7:f2:23:70:9b:b4:76:97:88:1f:4e:d6:a3:3f:e1:
9c:c0:11:9f:e9:67:bf:01:ba:40:e0:19:5e:ac:29:ca:c6:45:
9c:dc:25:c2:4f:53:10:c8:87:4a:c9:84:59:a1:db:41:38:74:
c8:1e:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 04:52:31 2025 by rpki-client