Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier: hcaOo6WEh6FA3mU/dkWG3FA+TOqj8j3yTVVX/Gp1df0=
Subject key identifier: 8D:BD:F1:37:AC:4E:0B:22:92:D8:60:28:3A:23:C8:E3:CF:07:0B:68
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial: 0198496686FEE7582DDA68B885F0D8C8FB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number: 0DA3
Signing time: Sun 27 Jul 2025 01:01:52 +0000
Manifest this update: Sun 27 Jul 2025 01:01:52 +0000
Manifest next update: Mon 28 Jul 2025 01:01:52 +0000
Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: vO2KNdy8ydt/GWTmLfmI+SkRXrvFNn9eTwYsHpBGNZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:86:fe:e7:58:2d:da:68:b8:85:f0:d8:c8:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Validity
Not Before: Jul 27 01:01:52 2025 GMT
Not After : Jul 28 01:01:52 2025 GMT
Subject: CN=8dbdf137ac4e0b2292d860283a23c8e3cf070b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:5f:b7:7a:84:d8:63:59:6d:16:ac:15:30:
38:bc:f5:d4:da:0c:dc:66:80:96:e3:c4:ac:6f:ef:
f9:33:39:6b:bd:76:e8:f6:fe:b7:35:94:88:5a:3d:
1a:d5:f3:e0:bf:3f:04:87:51:0b:b7:a7:12:03:34:
51:5d:32:2d:29:39:1c:74:9b:fd:32:62:a4:b3:08:
76:30:34:75:3f:f6:ec:c4:02:0c:20:74:58:da:a6:
e2:84:e4:bf:89:35:65:19:17:53:59:8e:f3:5d:fa:
23:3f:bf:87:99:40:8c:5e:d3:ec:2c:a4:2f:b5:ba:
77:2f:ca:dd:84:35:19:da:72:32:9c:29:9d:f6:0f:
bc:49:f6:cb:6b:fe:52:64:af:6e:4f:8d:d1:b5:4a:
4d:99:b6:ea:62:a7:e4:a6:82:84:a1:c2:d6:77:18:
34:25:71:24:97:97:2b:48:47:2e:bd:20:e5:af:d3:
d3:27:29:e7:1e:69:e1:bf:84:67:90:3b:7f:76:4e:
94:f7:65:17:ac:18:bb:97:0e:3a:15:97:8d:91:b4:
af:24:9e:34:b3:6f:41:0d:a7:ce:87:a1:d7:7d:90:
10:60:e8:35:e8:e1:6a:94:d1:06:1d:27:fd:e7:7f:
70:f9:ff:f9:44:38:c6:32:da:65:a8:6f:6a:4e:f3:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:F1:37:AC:4E:0B:22:92:D8:60:28:3A:23:C8:E3:CF:07:0B:68
X509v3 Authority Key Identifier:
keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8c:f6:89:e9:43:61:78:34:22:64:6b:b6:58:a9:7c:77:05:
c1:9e:bb:d2:16:47:4b:e9:52:aa:41:86:a8:fe:45:a6:e0:f0:
7c:ba:c5:25:eb:03:db:1a:13:06:5f:8e:0b:dc:bb:de:ab:42:
dd:19:d0:bb:49:6d:2a:20:cf:4f:5d:bb:6c:d6:2b:85:c2:9e:
41:25:fe:b3:99:a6:b0:31:36:80:12:d4:f7:32:ec:73:56:83:
d8:ef:33:70:e9:95:8f:67:26:f2:28:45:19:6e:f5:5d:ac:dc:
29:fb:3b:42:c0:f0:5e:5c:14:84:ad:a8:e2:12:c5:c7:0e:99:
82:5d:a2:70:63:4e:5f:64:f8:18:32:c4:60:d1:c1:5c:b7:bb:
2d:0d:a6:32:b1:cd:8c:b0:fd:c2:18:12:70:6d:3e:18:ed:8a:
4e:57:01:08:99:06:c4:94:b1:44:34:23:7e:02:ca:41:89:33:
cd:5d:53:7b:55:b8:96:74:d4:1a:a3:3a:9b:08:f0:14:88:95:
9e:e7:24:fe:02:e7:fe:7d:1d:ef:a0:40:c2:d8:99:ea:29:19:
b1:8d:18:8d:f6:65:61:da:0c:10:3d:fe:68:b4:d1:0c:13:e3:
b3:33:21:04:52:8e:7f:20:19:d4:60:62:a3:c2:b1:04:73:f5:
c9:54:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:32 2025 by rpki-client