Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
File: jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft (raw, json)
Hash identifier: sRMaF6emzsgNj20dPMOTSm3X6cn2vwGNyF2fxXx5tu4=
Subject key identifier: 0B:2F:01:0E:B5:30:17:9D:D2:29:36:5A:45:55:24:19:5F:1D:D5:06
Authority key identifier: 8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
Certificate issuer: /CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Certificate serial: 01984AAF1618A8475037F31C1D9ADAB2D8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
Manifest number: 0529
Signing time: Sun 27 Jul 2025 07:00:45 +0000
Manifest this update: Sun 27 Jul 2025 07:00:45 +0000
Manifest next update: Mon 28 Jul 2025 07:00:45 +0000
Files and hashes: 1: jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl (hash: lwqvB4PpCIfA2PMl+z5LbBJtJ9K9uA1uWSBhlRSHQZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:16:18:a8:47:50:37:f3:1c:1d:9a:da:b2:d8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Validity
Not Before: Jul 27 07:00:45 2025 GMT
Not After : Jul 28 07:00:45 2025 GMT
Subject: CN=0b2f010eb530179dd229365a455524195f1dd506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:45:f6:d3:00:8b:8b:5d:45:96:54:47:6c:
6b:ed:d5:61:34:d9:be:15:8a:17:ae:b6:78:6c:6b:
17:85:d6:99:08:6b:bc:1d:58:4e:79:6e:99:67:31:
28:02:ea:a1:10:88:35:99:a5:7c:3f:07:3e:82:68:
86:e3:86:ec:50:50:bd:c6:00:39:51:a5:10:46:37:
7b:4f:d6:12:d1:54:39:cb:3b:46:1c:45:c7:be:6d:
8e:93:3b:36:7e:0a:43:85:59:09:3e:f3:b8:35:75:
38:4f:ed:ad:fd:7b:45:19:be:d4:bd:cd:4a:26:c6:
b5:63:1a:47:87:08:94:11:24:27:c7:81:af:6b:be:
42:c5:b4:d5:3a:a4:a1:a9:1b:fd:fe:28:fc:ad:de:
11:de:ee:07:bd:fd:75:7e:34:b9:e3:1a:15:05:66:
b1:f2:18:fc:99:0e:4a:d5:c3:fa:b1:99:96:ca:25:
2d:f8:0e:4f:80:74:ea:72:a2:59:f5:55:9a:bc:2e:
f4:e7:8e:d9:4f:5e:45:36:56:f3:e0:8c:6b:ed:58:
22:88:ca:ef:e7:75:aa:01:ef:e3:49:02:de:e6:79:
5d:32:86:7c:a6:24:08:ac:e4:3f:2a:4b:9d:96:80:
28:49:40:87:bc:ea:4d:9f:02:b1:30:0b:c1:dc:d0:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:01:0E:B5:30:17:9D:D2:29:36:5A:45:55:24:19:5F:1D:D5:06
X509v3 Authority Key Identifier:
keyid:8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d6:ba:c4:f9:ca:5d:bf:e6:5f:52:6f:92:14:04:24:82:49:
88:94:ef:64:1e:5f:2c:3f:b8:e5:c5:f4:ea:4d:87:43:a3:a0:
d4:12:3e:af:3e:9a:d2:62:b1:42:bf:2e:59:f6:5a:40:b6:2e:
3e:e7:5f:a2:48:e6:85:6d:9e:fd:61:cc:2d:a2:44:3a:87:c0:
71:df:a5:e2:fc:ea:b8:e6:cc:b6:f0:c8:b4:f5:6a:c6:a9:b2:
cd:06:e4:51:82:91:c8:84:a8:36:53:04:06:bb:11:89:da:34:
4f:61:aa:af:8c:74:19:44:cf:d7:ee:67:dc:20:4b:8d:ab:67:
c5:af:92:32:0e:8d:69:2a:f2:ee:a5:4f:5e:1d:2a:f7:02:4d:
3b:ff:e6:9e:f9:57:a8:e2:ca:1c:b7:01:0d:95:c7:b1:20:5a:
cb:22:7d:11:0b:a9:12:c4:06:76:90:80:5a:7b:be:8a:93:ac:
f0:18:15:4d:c2:6d:93:d3:5c:f0:e7:90:35:68:6f:32:28:c2:
82:80:b0:d3:af:23:0c:45:8e:94:ac:1b:a1:a2:45:ba:41:0b:
bd:3e:90:b8:5e:64:2d:b2:ed:21:0b:91:7a:ca:fb:9c:c4:af:
a8:06:a7:2a:8e:ed:ae:83:8f:6b:96:d5:f8:b7:d6:42:65:29:
39:bd:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:01 2025 by rpki-client