Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: ZsAN1nl9yGuzOeJQ61eXm7yjSWmrpjnitxW4XKk9bn0=
Subject key identifier: 57:DA:9F:AE:F0:12:28:C2:D6:9E:53:C3:03:42:9F:40:F0:37:61:24
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019918097B3137DB4D3F024FCB4DF691FAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0785
Signing time: Fri 05 Sep 2025 04:01:38 +0000
Manifest this update: Fri 05 Sep 2025 04:01:38 +0000
Manifest next update: Sat 06 Sep 2025 04:01:38 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: S8zXEyHEiESNFYwVT6v/nfPpnCBDCbV6pzYil6MjceY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:7b:31:37:db:4d:3f:02:4f:cb:4d:f6:91:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Sep 5 04:01:38 2025 GMT
Not After : Sep 6 04:01:38 2025 GMT
Subject: CN=57da9faef01228c2d69e53c303429f40f0376124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:6d:43:ca:81:70:3f:45:5c:e4:a1:f5:34:
5e:56:01:63:2c:26:84:c5:20:cc:d8:56:0c:ab:37:
8e:b3:51:cf:97:09:d1:f0:8d:93:4f:e4:ea:2a:bd:
db:c8:36:1b:64:12:7c:c1:a1:bb:44:9b:78:d6:44:
15:3b:88:34:d1:01:fa:3d:e0:29:b1:a5:2e:a6:01:
69:f9:c4:13:e9:08:6d:22:dc:3a:05:22:7c:e1:c3:
15:a5:54:bf:71:4f:59:f5:b0:e0:4d:97:46:5a:4a:
45:79:89:c4:0e:da:09:5f:8c:5c:33:2c:71:c9:0d:
27:32:7b:0b:09:ad:57:c6:0f:18:df:8b:62:7e:d3:
99:98:ab:ec:bc:9b:f2:16:f3:5c:8c:2a:42:cc:dd:
ba:31:60:4d:14:5f:47:32:20:27:17:1f:e1:2b:a4:
1d:3b:22:8f:57:1c:ea:3b:79:d0:9f:69:d6:0e:0a:
2c:64:eb:3c:12:bf:9c:38:ea:bb:ca:90:b7:a0:f9:
17:0f:e0:8a:fd:1d:22:c7:65:e9:4f:fd:42:77:63:
50:ce:98:cb:6f:7b:35:37:93:2b:e2:e6:85:14:0d:
28:1a:bd:84:60:0c:af:81:db:7e:5b:13:4f:be:1d:
62:05:b8:55:05:b6:70:2c:25:fb:fa:12:42:12:f3:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DA:9F:AE:F0:12:28:C2:D6:9E:53:C3:03:42:9F:40:F0:37:61:24
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:57:bc:2d:58:fc:90:89:a9:10:a7:58:34:c2:8a:80:59:
a2:6d:b0:18:44:f5:cb:d3:18:e6:9b:c2:90:69:e0:30:b8:e4:
97:0e:a3:7e:32:f6:46:1a:11:fe:66:70:af:a3:56:75:5c:c3:
4d:0c:c9:ca:44:21:d5:e1:e9:39:8d:94:55:a8:c7:e8:97:38:
64:b4:7f:0e:21:e2:4f:9c:b8:c0:ce:7f:4d:3d:72:2f:f2:7e:
f6:e8:b9:a9:ce:00:7f:eb:33:12:d7:ab:f1:f5:f5:b6:55:60:
be:84:75:91:9e:24:1c:b5:34:7b:c8:cb:75:61:84:b2:2e:6b:
e4:3d:7d:ae:c0:ab:3e:b4:8c:42:7b:ee:04:cd:4e:48:d5:c3:
65:94:36:b4:a5:2a:97:f8:35:c2:59:c1:3b:85:a9:4f:f5:10:
cb:c6:f5:0e:d0:49:32:4a:3d:38:62:e9:90:5f:b5:95:e5:fa:
55:3b:d8:e4:b9:0b:9f:4a:c8:eb:a5:71:40:3f:e7:60:98:54:
15:d4:f7:2d:60:84:d2:ff:36:da:0a:1d:45:13:16:a4:0c:14:
e4:d8:7b:a0:f3:ad:e8:d1:bb:cf:e8:fa:f9:74:38:ea:4c:c6:
82:f1:48:2b:0d:f5:8a:6c:eb:9c:82:22:cb:f1:ad:e0:82:a5:
47:30:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:39 2025 by rpki-client