Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File: jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier: fdYo9u0BxHeIaEaWL0VM0roWBEz6iLpa03HEr/jFEBc=
Subject key identifier: B4:7F:18:A8:A5:C5:8E:AC:29:84:E8:CF:C6:C6:34:BD:9F:9A:D9:41
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 019923A0173953430B6770C5210C5871B93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:58 +0000
Manifest this update: Sun 07 Sep 2025 10:01:58 +0000
Manifest next update: Mon 08 Sep 2025 10:01:58 +0000
Files and hashes: 1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: 352zRZKtG9qCzCngZa0HOql45ROmbBoQURldkJzFH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:17:39:53:43:0b:67:70:c5:21:0c:58:71:b9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: Sep 7 10:01:58 2025 GMT
Not After : Sep 8 10:01:58 2025 GMT
Subject: CN=b47f18a8a5c58eac2984e8cfc6c634bd9f9ad941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:57:f3:59:01:a1:b5:77:f0:6b:09:ee:83:
db:71:46:5a:47:dd:56:68:e2:1e:37:5a:55:3e:bb:
f3:2e:b2:61:04:3b:1c:17:b5:4b:23:9a:f6:71:9c:
38:3e:57:32:75:95:61:86:5c:21:62:8e:1b:41:de:
c8:ee:a5:4c:a1:0f:f6:7b:a3:30:b6:e9:82:ea:f1:
da:ba:bb:af:9e:a2:48:eb:66:6f:d6:6a:67:a0:92:
e6:42:6e:54:a0:1e:ad:31:bb:b0:e2:6c:9b:fa:96:
be:23:3f:3d:93:84:8b:83:6d:7c:fd:0f:38:0a:2c:
68:82:fa:2c:61:69:ec:60:d5:63:6f:b8:d8:61:82:
8d:b8:d4:24:93:4e:a9:2a:35:fa:ce:a0:f9:d8:09:
e9:3e:07:65:bc:a6:3d:5b:f9:ac:8f:8e:22:88:0e:
f0:ce:17:01:54:89:ae:5b:4c:bf:c0:d2:8c:9b:42:
31:77:7b:e1:2c:ae:b1:2b:ac:e0:fa:e6:52:20:15:
46:5c:37:99:5a:56:b5:23:ad:0f:4a:d9:5b:02:5b:
b2:82:aa:c7:d9:03:56:4d:a5:11:3b:bd:0e:02:07:
96:c3:5f:ce:1a:42:30:a6:12:bc:fa:f7:3b:34:2e:
d1:3c:bf:be:31:8e:5f:01:d4:5f:1d:9e:f1:8f:e7:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7F:18:A8:A5:C5:8E:AC:29:84:E8:CF:C6:C6:34:BD:9F:9A:D9:41
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:97:ab:c7:06:d5:68:2d:c9:62:4c:3c:db:cc:25:2a:ed:
1a:7e:69:1d:78:6a:1e:67:54:0b:d5:58:cc:6b:ac:c5:e7:41:
f1:de:07:9c:1d:93:ba:e8:15:4d:34:9a:37:17:7d:57:22:df:
d3:31:c8:b9:15:bc:8b:95:dc:79:9b:97:c5:1d:d1:91:88:e7:
d0:65:92:1f:dc:fa:59:e7:91:0f:de:1f:28:3a:9c:21:44:08:
c1:bd:cc:bb:56:b9:40:b1:5a:fa:7d:fb:18:91:63:cc:2f:64:
46:c2:ce:f9:3b:c3:40:84:d2:ab:92:5e:b8:5e:f5:84:b0:f8:
a0:ce:0d:b7:cb:b3:43:6e:46:cd:21:82:e8:39:8c:66:3e:38:
a3:db:0d:5e:a3:f3:46:5f:4b:e0:61:e9:4e:ea:6f:91:6f:34:
f2:bd:79:9f:0e:43:9b:3a:5f:c9:a5:16:2d:47:04:1d:40:fd:
3a:8d:58:d3:1d:ea:a3:8e:0e:29:3a:61:48:07:78:b3:67:95:
d0:67:84:53:3d:07:ae:d3:a7:b3:22:2b:cc:56:a6:2b:e2:e8:
59:ae:54:bc:ae:c1:a7:7e:c1:30:00:52:b7:93:b8:3b:22:c4:
18:6e:84:d5:21:fe:0a:70:b4:0b:f6:e3:fb:47:7b:40:0d:75:
24:34:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:10 2025 by rpki-client