Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: P6LEkgMvfy7CXKBcTF2OP1MuM1BWNKLebRC8unOb5Ws=
Subject key identifier: 29:0E:2C:87:CC:49:32:81:89:55:80:BD:DE:B1:91:52:41:0F:F2:72
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 0198443F12B25C6B68FFE6D8BA6D4A1E54D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 01:00:40 +0000
Manifest this update: Sat 26 Jul 2025 01:00:40 +0000
Manifest next update: Sun 27 Jul 2025 01:00:40 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: Fau364vrjqKeiaOuS+teye9me5Rp6qX6UIT1hRMn2yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:12:b2:5c:6b:68:ff:e6:d8:ba:6d:4a:1e:54:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Jul 26 01:00:40 2025 GMT
Not After : Jul 27 01:00:40 2025 GMT
Subject: CN=290e2c87cc493281895580bddeb19152410ff272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:9f:48:b9:86:34:5e:3d:bd:f0:40:70:0e:
de:b3:57:f6:f0:13:7e:66:14:2b:93:44:f3:a5:55:
03:0c:c5:de:1c:29:26:ea:96:08:6d:a9:85:34:6a:
ec:48:ef:cf:f7:5e:a2:d6:84:bb:23:89:b5:67:b5:
63:dd:14:9a:65:b7:0d:ad:61:d2:af:34:8c:31:63:
d7:33:ee:36:ca:f8:a6:b0:0a:f1:d5:5e:07:49:2d:
83:6c:3b:bd:51:3f:7f:4b:bc:60:fa:c4:a2:b7:04:
21:47:04:dc:8b:da:39:90:0e:15:92:e8:2f:ec:97:
c8:1d:61:31:c2:73:0b:40:06:66:ce:12:03:a2:7e:
b2:29:4b:aa:f5:f7:23:d8:75:b3:e4:df:e1:7a:88:
a4:89:fb:62:cf:00:5c:69:03:0d:a5:82:af:42:29:
88:70:6a:f9:d7:5c:0b:68:70:ff:66:b6:a1:2f:19:
57:e9:5f:85:fe:f0:1d:19:07:7e:9d:89:85:a2:6e:
a1:51:9b:06:99:ab:fd:2d:21:3b:f0:22:2c:ea:6a:
28:80:61:ee:8d:77:b3:2a:2b:ee:17:14:5e:2b:31:
48:43:22:9d:d7:ff:ed:2c:2d:a1:d6:7d:2b:8d:bb:
01:98:be:2d:f4:11:34:1e:06:25:e7:c8:8e:33:46:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:2C:87:CC:49:32:81:89:55:80:BD:DE:B1:91:52:41:0F:F2:72
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6a:40:dc:62:09:d2:f6:fe:d0:f6:bc:7e:fc:ef:15:27:23:
45:60:96:fd:5f:48:a2:89:ed:52:52:b2:76:31:93:b7:d1:e5:
51:0d:01:e3:d0:50:ac:e1:c4:8f:86:8a:48:ee:e5:79:28:b7:
6b:a6:2a:1b:5b:fd:79:67:c4:ea:70:31:d7:df:2b:9f:3f:5e:
ec:ff:e7:98:e0:1d:ed:95:ef:08:25:2c:d4:e5:25:18:63:aa:
47:dd:28:c7:43:61:2e:76:ba:b9:5e:02:6e:cd:90:5e:06:67:
6b:13:a8:32:86:62:ef:53:bc:c8:28:e7:d7:80:7f:08:81:c5:
03:79:3f:d1:a5:70:f7:71:6d:9a:46:90:24:bf:64:28:81:37:
1f:31:53:61:69:d0:e3:ba:9c:52:64:b0:a9:56:e4:23:c0:c2:
93:82:07:67:ef:07:7f:e8:7c:79:d5:f2:97:af:1a:4d:af:2c:
f4:3e:c0:ba:11:38:4d:e1:f7:48:eb:17:4b:18:ba:2c:02:9e:
d0:8b:c4:3b:1e:3a:4c:6d:7a:cf:03:34:6f:a4:e7:40:0d:b8:
e2:fe:de:86:82:a5:08:cc:2f:bf:50:80:05:8e:96:7d:d5:bb:
e0:17:f6:27:20:30:09:ba:47:58:97:20:61:07:d9:cc:65:73:
60:11:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:57 2025 by rpki-client