
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: mAR0MOtKcG/TptdAEkU7exdfsk7YBerjZucgwPzXMyU=
Subject key identifier: 13:3A:E3:37:38:0C:A9:B3:FB:DF:A6:55:C7:D0:83:84:25:C1:2B:A3
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 019923A01F9747B56196719B055DAA1B3396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0E46
Signing time: Sun 07 Sep 2025 10:02:00 +0000
Manifest this update: Sun 07 Sep 2025 10:02:00 +0000
Manifest next update: Mon 08 Sep 2025 10:02:00 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: oktbmesLxJfwrJWCa1xWuyjQL597shPGc2NLVkC/wJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:1f:97:47:b5:61:96:71:9b:05:5d:aa:1b:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Sep 7 10:02:00 2025 GMT
Not After : Sep 8 10:02:00 2025 GMT
Subject: CN=133ae337380ca9b3fbdfa655c7d0838425c12ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:55:a4:e7:9b:d3:82:9e:3c:5b:e7:f7:83:
cc:20:92:c3:c8:c7:c2:08:63:94:07:33:2c:ae:3d:
8b:bf:47:57:8f:2e:17:b1:b1:03:0f:dd:a0:dc:4c:
2a:9c:b8:58:e5:5e:25:08:d6:2e:73:3a:57:f5:30:
67:fb:c0:f7:d3:3a:b4:bc:3f:a1:75:ca:35:6e:1b:
10:48:9a:23:b2:ea:cf:98:d6:43:77:70:6f:66:2c:
50:27:8d:f6:1e:9e:11:5f:39:bf:b5:6c:6a:94:c2:
09:ad:ab:3a:d6:13:c0:ba:85:1f:5b:82:e5:8e:6f:
0d:3d:09:a4:1c:a3:60:09:1b:b6:2f:7b:f5:c8:4a:
90:8f:98:75:34:e5:4d:ac:68:70:65:8d:08:db:01:
c4:d6:08:97:13:dd:51:7f:bf:a4:5f:6d:39:a2:03:
75:8c:a3:0b:b9:2f:29:40:2d:60:2e:34:bb:3d:4c:
98:c8:65:67:64:83:65:f2:9a:0a:16:b5:0a:1b:50:
1b:f7:79:5a:1c:bb:34:dc:9a:1a:5d:97:b2:9d:c0:
42:48:3e:86:3b:90:79:91:62:1f:6c:ad:bb:11:a1:
04:ec:2d:dd:33:15:af:b1:0f:10:bf:9a:63:0d:6c:
40:35:1f:6b:a7:7b:c2:83:61:b8:20:b1:1f:17:8d:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:E3:37:38:0C:A9:B3:FB:DF:A6:55:C7:D0:83:84:25:C1:2B:A3
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:cf:4c:15:92:71:1d:0a:7b:bb:0e:7b:4e:fc:d1:f5:dc:
93:86:2f:ef:7a:b6:9a:ff:d0:77:f2:17:f3:54:ff:3f:3b:39:
c9:39:69:f2:0d:53:d7:e0:63:e2:d1:27:32:f8:a9:db:e8:30:
e0:41:86:24:e3:16:93:56:c5:cd:7b:1f:55:c6:93:f3:1e:62:
d9:a8:91:75:4f:4b:5c:40:95:32:73:04:45:b6:3d:43:5b:fe:
d3:2f:08:36:12:ca:92:90:50:71:dc:0c:f9:a9:c0:6b:5a:ae:
e2:c0:1c:fe:24:8a:a4:81:46:85:4e:b6:7e:97:78:13:fc:9d:
a7:4b:88:bf:8c:da:94:2a:9f:a0:5d:ca:2c:fb:85:aa:b0:14:
4f:cb:82:6e:a7:21:da:9e:ad:5c:0d:19:dd:5f:9c:34:51:5f:
35:66:21:5d:82:2e:da:98:a4:1a:27:d7:1d:5c:7a:69:f6:fb:
33:ed:8b:a4:fd:b9:ad:25:16:9e:f4:25:eb:dc:42:17:3f:37:
2d:6d:ea:16:cc:5a:d8:f5:4a:8b:fe:7b:a6:92:f3:82:16:d3:
42:cc:5a:c4:95:43:6a:26:8e:08:ce:f7:2c:11:f7:8f:1c:e6:
01:87:7d:4b:f2:ef:09:93:0c:f7:00:4e:2a:50:bc:31:7e:cc:
0a:1b:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:07 2025 by rpki-client