Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: 5RTK2UUWxajyFtMyEBVixMhJQKtZ+1zTGY24Q7+jX/s=
Subject key identifier: F3:79:85:CB:59:5F:67:76:4A:F4:26:10:9E:AD:B9:68:B8:E4:32:35
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 01984777D95539382396B58E1F909B7A1819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:01:33 +0000
Manifest this update: Sat 26 Jul 2025 16:01:33 +0000
Manifest next update: Sun 27 Jul 2025 16:01:33 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: 3o3z9abxq/zxKGamR4rvJ7A7B+O30yDjbLxJrmSPobQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:d9:55:39:38:23:96:b5:8e:1f:90:9b:7a:18:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Jul 26 16:01:33 2025 GMT
Not After : Jul 27 16:01:33 2025 GMT
Subject: CN=f37985cb595f67764af426109eadb968b8e43235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:85:fa:df:c8:11:84:49:a3:9f:60:4a:88:
2b:bd:a1:0f:13:97:c1:1c:f0:36:3c:86:d3:14:d4:
37:3b:5e:d2:ec:1f:02:ad:16:a4:79:cc:ef:f5:0c:
cc:5e:74:d4:23:a2:8c:44:3c:24:de:83:14:19:6e:
b6:36:e7:b8:09:56:36:31:f2:66:8a:2b:b7:3d:65:
cc:20:7f:8a:ea:d5:6f:f5:57:4d:83:56:29:0f:c2:
be:47:99:ec:60:f5:1a:a3:e4:08:ef:00:e5:43:db:
c1:ed:33:e6:dd:4e:dc:c9:7a:fb:7a:8c:af:a0:cb:
19:2f:8a:68:24:2f:7e:8f:21:2a:e3:04:4f:35:25:
40:73:9f:41:1d:d5:c7:83:e2:ee:e8:5a:90:23:b0:
6b:e8:fa:f6:84:90:24:71:4a:eb:07:19:1c:04:df:
cf:24:04:d7:63:3c:36:d8:6e:f2:1a:0d:d1:0f:6b:
1b:8e:56:46:e6:d8:e1:bc:d9:8f:6a:bb:e4:4b:00:
d5:ba:f6:31:ae:6e:d2:44:31:df:82:6d:0f:c2:82:
f8:4e:cb:0d:26:a1:46:5c:cd:26:83:1d:dc:82:2c:
a3:ab:52:9c:76:fb:d0:a8:41:df:ac:d2:63:8d:b6:
93:31:90:57:a0:10:ad:b8:12:71:4a:7c:ec:eb:66:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:85:CB:59:5F:67:76:4A:F4:26:10:9E:AD:B9:68:B8:E4:32:35
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:8b:51:75:59:d6:ae:53:44:6a:a8:70:f8:2d:ea:fa:f2:
da:62:64:2e:51:cc:c0:13:67:f7:98:da:c7:41:68:1e:54:46:
9c:e3:95:8c:de:ae:33:87:b3:3b:48:09:18:a7:e7:d5:11:7b:
de:d5:c0:27:a8:c4:61:e1:9b:25:38:89:6e:57:2b:cd:28:67:
30:72:02:b5:4a:40:b7:cf:02:a5:24:e9:0b:c2:0a:a0:78:6b:
d8:20:57:3d:55:58:99:55:38:6f:67:38:72:d4:8f:72:85:55:
05:4d:db:3d:79:50:7d:b2:47:c7:7e:54:29:f6:01:f5:db:68:
3d:f3:27:9f:85:1d:65:15:39:13:f8:19:5e:4e:b4:2a:70:43:
83:c6:33:2e:02:7e:fc:a1:ce:af:e7:fb:60:77:33:5f:0d:76:
eb:06:41:18:fc:d1:90:64:00:08:f9:9c:41:b0:41:e3:25:0f:
91:c9:f6:ce:51:3f:05:f1:2a:c7:6e:3d:28:df:33:dd:10:b5:
97:32:e6:69:19:47:20:bf:a9:7c:98:ca:c3:72:7f:71:c5:69:
86:c4:70:34:c3:1f:2b:1a:4c:30:11:17:2e:88:ce:a5:35:f2:
e9:2b:f6:4f:b8:1f:a7:6a:e5:98:8b:1a:7b:41:0f:f4:1a:38:
88:0e:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:19 2025 by rpki-client