Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: 0AEpczyO/1y2PEEf3SzKGvSwusuR/AghGcZtcE9O5wc=
Subject key identifier: 4D:48:88:F8:96:3D:04:B1:93:75:EF:67:0D:7C:76:5D:48:50:F6:98
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 019849D396AD575D0597818FAC0FCD80A771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0BED
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: ZgRK0NruyjdgU11CWToNecDoTSjZ1Ix85SaZLeRVW1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:96:ad:57:5d:05:97:81:8f:ac:0f:cd:80:a7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=4d4888f8963d04b19375ef670d7c765d4850f698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:77:ea:52:d8:d5:74:6d:93:92:86:69:52:
69:d3:ac:5f:4c:fb:67:98:95:ce:45:34:30:f9:0f:
36:23:2d:93:90:0f:ba:49:0c:f5:2b:ef:3d:5d:85:
a9:cc:52:db:71:12:23:eb:59:d6:e4:f7:90:a8:d3:
f4:ea:13:a0:03:2a:b6:b8:f9:50:ff:87:a8:bd:51:
ba:5c:f9:db:01:69:07:74:7e:47:c3:77:dd:7d:da:
aa:85:c1:92:5d:6d:fb:ac:84:2b:cb:a9:e2:36:8f:
e8:30:01:4f:a2:7f:94:a9:fe:9c:12:5d:fd:0c:b7:
be:e9:f6:5e:7a:4e:8d:27:d8:77:f3:75:56:2e:18:
24:40:6a:ab:f5:8a:5f:fc:c1:b4:6d:6a:f8:f6:1b:
b0:f5:9e:c7:e0:3b:9d:46:91:79:7f:6e:b2:f3:94:
31:5d:c7:0c:83:66:6d:15:b2:39:43:aa:ae:5b:95:
02:ca:1d:8a:dd:63:3b:4d:6a:13:07:79:49:28:50:
e3:3b:ec:27:25:17:15:a5:ac:2a:10:96:07:4c:57:
a7:26:0e:3c:c3:73:b3:88:15:83:1d:bf:28:99:c6:
e9:bc:40:41:28:d6:44:e0:84:07:63:c9:02:0b:f7:
c7:43:7c:3b:b2:4f:01:bc:3e:75:47:84:03:ee:df:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:88:F8:96:3D:04:B1:93:75:EF:67:0D:7C:76:5D:48:50:F6:98
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f0:66:9d:39:d8:bf:67:e0:30:cc:3e:ae:8f:2e:50:cf:ee:
80:32:8d:27:f6:3f:65:2b:95:ed:de:a5:4d:06:6c:5b:4c:dc:
2a:22:01:8b:58:dd:28:5c:57:16:ac:f4:7a:3a:66:b8:99:11:
f3:05:cf:50:c1:29:5f:31:e7:4f:74:73:4d:34:12:8c:c0:e3:
10:b6:84:4c:18:0e:81:8c:a2:39:ee:79:f3:8b:6e:0e:7a:f0:
79:a6:1f:49:eb:ed:34:b1:96:16:71:02:5c:c3:1d:e5:2b:61:
f1:b0:fc:67:0e:f5:08:ce:ee:e4:4d:04:51:a8:6b:41:8b:70:
0f:92:8f:09:14:c2:9d:06:6f:18:b1:b1:c7:18:1f:5d:0e:48:
14:b3:72:65:88:92:60:fc:be:be:6e:c3:83:df:61:73:2f:39:
e4:5d:86:3d:ec:94:3f:e4:48:e4:38:0a:db:dd:b7:30:fa:ce:
75:ec:72:65:85:f7:e9:3d:9a:73:58:45:1a:bc:23:bb:4e:ec:
17:e5:0c:15:96:e4:14:37:2a:08:b6:63:fd:a0:35:11:94:a4:
77:42:fd:be:d1:8d:03:c6:3c:42:71:04:4f:2b:71:99:1f:e1:
66:5d:cc:04:ce:a4:9c:3e:28:b9:ae:45:1d:8b:61:bb:8d:4d:
d1:4a:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:07 2025 by rpki-client