Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: 62FW+qD6TL6Rna40Kv9vYXPiFhQmjBjXp4ETlHt9iFQ=
Subject key identifier: 41:E2:1C:30:D8:56:59:B7:4B:25:16:FD:F8:D5:91:57:7E:E9:9E:7D
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 01984A09EE021576AF24B2869F624D392C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 04:00:21 +0000
Manifest this update: Sun 27 Jul 2025 04:00:21 +0000
Manifest next update: Mon 28 Jul 2025 04:00:21 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: fQue5qOiyI/YAx+XazgGhknE9uK+hW/ouNFkBB2udAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ee:02:15:76:af:24:b2:86:9f:62:4d:39:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Jul 27 04:00:21 2025 GMT
Not After : Jul 28 04:00:21 2025 GMT
Subject: CN=41e21c30d85659b74b2516fdf8d591577ee99e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:93:f4:36:f2:5d:47:46:56:d0:63:01:15:
94:6b:83:02:b1:35:3e:98:ca:7e:ab:9b:65:8a:6d:
4d:ed:1c:38:4f:de:a4:d4:1c:24:76:4c:16:05:1e:
00:a9:cc:d9:45:7c:e2:14:dd:77:c0:fe:03:3a:72:
d4:90:15:a5:db:75:1e:fa:a5:1b:e5:bc:25:73:03:
ce:e5:f3:28:b8:f3:9e:62:d6:58:09:5b:59:41:d3:
8b:96:19:76:64:4a:26:fa:df:4a:4b:48:17:92:09:
e3:6a:c1:bb:6b:26:3a:3e:77:28:53:57:0c:f6:93:
99:77:08:b7:b5:96:43:ac:67:45:2e:72:41:cd:87:
65:d5:d1:ea:27:2d:2f:18:47:8b:60:7a:a4:9e:24:
eb:f4:89:bf:b3:dd:5f:88:c4:88:a0:75:76:48:2b:
99:f3:68:cf:7d:fe:99:0d:47:08:75:e1:23:55:66:
84:a0:74:29:fd:35:2e:2b:9f:7a:53:cb:ce:13:b8:
58:24:4e:89:88:68:86:1a:a7:5b:80:58:a8:88:8e:
9c:5a:14:1a:ca:4d:14:47:60:91:fb:f2:d6:e0:27:
bb:17:33:04:d1:e6:78:40:76:5e:5f:16:79:78:d6:
ac:7a:31:4f:a7:fb:3b:90:bd:b6:79:6f:63:d4:29:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:1C:30:D8:56:59:B7:4B:25:16:FD:F8:D5:91:57:7E:E9:9E:7D
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:dc:c8:f8:00:07:73:c0:58:bf:39:07:11:f6:32:20:fe:
10:f0:d3:db:f8:50:2c:46:30:e5:cb:b8:64:16:d6:54:49:0f:
37:36:71:50:11:32:19:c8:55:3e:11:44:13:79:ef:04:38:24:
89:85:14:3b:3d:eb:ea:d5:85:c6:6c:80:64:09:38:db:da:51:
de:52:99:4b:fe:3a:7e:51:53:90:0a:1d:e8:8d:7c:9f:92:3e:
20:da:c0:5e:bd:ab:c8:75:63:2b:6d:7b:a5:c9:29:ba:a5:82:
b1:e1:9a:04:dd:ed:7e:70:57:f9:53:d9:f7:de:a4:68:4f:eb:
d3:c3:02:68:d3:3d:58:dd:d9:31:86:f3:44:06:7e:12:e9:6e:
16:c1:b7:dd:28:23:0f:ba:19:2c:2e:98:b0:4f:e2:a3:5c:e9:
50:1f:f2:eb:2a:d3:d8:7a:05:69:e2:1a:8a:6a:eb:19:d6:b9:
d0:f0:74:1f:1a:2b:30:14:a0:3b:90:4a:7d:bc:c6:39:e2:22:
d4:77:0e:80:d6:64:da:14:d5:95:b8:a3:42:a2:ee:42:88:99:
0b:4c:1e:1e:7e:79:59:4f:c0:d5:97:e7:0b:83:46:ba:4e:88:
8f:6b:e9:02:4d:c7:7e:06:e9:a6:3f:25:04:a1:0e:57:25:e3:
3b:8a:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:03 2025 by rpki-client