Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
File: jR3ulkqib4m9ECJ21GVjP7guqig.mft (raw, json)
Hash identifier: ZR7Q0smEQkWYXNlIBi8XaDJplN/5wX/W8fbfgCouvC0=
Subject key identifier: F1:D0:31:13:B2:B5:5B:4F:C2:64:82:70:6B:7D:EA:D7:45:7C:7B:3B
Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Certificate serial: 01983E739E6C805A33F3124FB919247FC179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
Manifest number: 0A5B
Signing time: Thu 24 Jul 2025 22:00:21 +0000
Manifest this update: Thu 24 Jul 2025 22:00:21 +0000
Manifest next update: Fri 25 Jul 2025 22:00:21 +0000
Files and hashes: 1: jR3ulkqib4m9ECJ21GVjP7guqig.crl (hash: z+MGW4pRKfUBfPgGH3DQyY9bUPVqEKGJarIzvaVrDy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:73:9e:6c:80:5a:33:f3:12:4f:b9:19:24:7f:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Validity
Not Before: Jul 24 22:00:21 2025 GMT
Not After : Jul 25 22:00:21 2025 GMT
Subject: CN=f1d03113b2b55b4fc26482706b7dead7457c7b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:cd:72:f6:ac:a2:e5:4f:b0:5b:7b:6d:e5:
e0:0c:33:02:bf:b0:42:4b:40:06:cd:f3:9e:7f:0f:
44:43:23:57:c8:e1:c0:71:59:c9:82:b0:3d:08:d9:
dc:89:60:7f:d4:66:03:ad:7e:84:0b:6e:5e:cb:a1:
c3:c7:d8:f0:a6:dd:b6:19:51:fd:e4:36:e5:66:df:
39:04:c1:92:0e:4c:04:23:4f:79:61:d8:f7:68:73:
15:22:62:76:b8:7f:df:92:02:fb:34:eb:0e:9e:12:
7c:1f:a1:ba:74:5f:48:0d:f8:47:71:c9:08:3c:48:
f8:7b:c4:67:dd:2a:ef:c7:6d:9b:7e:50:75:13:9b:
8e:77:1f:a4:2a:ed:43:c9:54:4c:ca:ad:ba:92:c1:
eb:7d:55:1d:34:61:4b:21:d7:d5:a4:7d:5f:b3:8c:
9e:e6:d5:f5:6d:58:5b:d4:17:9a:ca:c8:69:82:75:
e3:5e:6c:f8:b8:2d:15:e7:62:2d:20:87:da:5b:ed:
cb:89:af:21:0b:25:4b:33:60:c5:d8:64:3f:0d:e1:
35:b8:66:e3:f4:fe:59:88:8f:6f:4b:9b:10:6c:48:
8f:7f:75:42:e8:e1:b1:3d:a5:01:87:43:9a:ff:3c:
51:35:f2:bc:9a:46:5f:a5:2d:21:fc:ff:4f:3b:81:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:31:13:B2:B5:5B:4F:C2:64:82:70:6B:7D:EA:D7:45:7C:7B:3B
X509v3 Authority Key Identifier:
keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:19:70:ae:df:cc:7d:18:76:04:14:da:29:d8:57:65:10:
56:f5:b2:b6:8a:55:d5:da:f7:e8:c1:a4:ac:1e:50:06:a9:9b:
33:a9:c3:18:e6:da:ee:2c:a7:35:e3:97:35:e3:1e:82:09:46:
56:b7:63:ef:f6:81:ba:07:a2:d4:65:d5:71:03:01:fc:bc:8a:
fc:4b:78:dc:c3:e0:ff:fc:64:dd:6e:cd:7c:25:9d:4e:35:c8:
f4:9a:5a:28:c5:6a:05:76:37:94:2b:87:c8:f3:7c:05:ab:10:
a3:4c:cc:30:84:54:8b:01:f4:82:f3:21:e2:c3:f6:3a:7c:b0:
0a:5b:af:2e:ee:6c:bd:37:18:39:0e:3c:b3:1a:9f:aa:83:ec:
19:10:26:24:00:f5:89:36:82:bd:46:c0:b7:71:b9:a2:1b:0a:
50:c7:72:47:30:ad:1b:18:29:97:45:41:31:23:16:17:13:e0:
60:c7:c1:a1:bf:f4:4c:f6:77:3d:23:b3:92:9d:1f:6b:7b:80:
ef:7c:63:d9:b3:f3:04:94:e8:84:b4:6b:b9:ad:4d:b4:9f:84:
b1:0e:04:f0:87:c2:8e:46:6b:18:7b:cc:87:55:d6:ff:48:99:
ee:6d:a4:2b:06:a2:f3:7b:d9:f3:c5:47:6d:16:35:4f:ca:0b:
a0:f9:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:38:31 2025 by rpki-client