Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: tJye+8mzz49fd/VxbOHL/elZlmYiZijlVM+NkO8gPfE=
Subject key identifier: DF:A5:B5:96:50:56:AD:B5:F7:DB:76:E3:0C:B9:47:D7:8B:0E:18:DA
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 0199239F9F955388E445175EDF21163C128E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 0B29
Signing time: Sun 07 Sep 2025 10:01:27 +0000
Manifest this update: Sun 07 Sep 2025 10:01:27 +0000
Manifest next update: Mon 08 Sep 2025 10:01:27 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: 9mhebntZtH6IMgETBNNHeqzWyO4y6lQ2eDfSxJ1qu+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:9f:95:53:88:e4:45:17:5e:df:21:16:3c:12:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Sep 7 10:01:27 2025 GMT
Not After : Sep 8 10:01:27 2025 GMT
Subject: CN=dfa5b5965056adb5f7db76e30cb947d78b0e18da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:18:a2:9a:57:f0:dc:1a:32:d4:24:60:ae:
c3:5f:4e:66:7f:55:96:63:21:01:2e:1b:46:de:f7:
b4:6c:0a:3a:f3:ba:5e:c4:1a:f0:be:68:39:6e:4c:
95:c9:d7:47:b2:2c:f8:d8:20:f3:b6:75:e7:b2:0f:
47:26:ed:2a:64:b2:44:e4:0a:f4:e5:90:2d:52:e0:
d3:9b:b9:65:ea:d8:ed:a1:58:8c:09:88:c2:90:f3:
92:9e:3f:42:b9:43:7e:bc:78:c9:a9:51:23:f2:1d:
d3:9d:e6:cb:19:24:2a:80:1c:4f:c3:eb:c3:8b:b4:
7d:8e:c7:59:d3:9e:e0:41:40:90:82:4f:67:ee:46:
31:0e:c7:fc:83:bb:ea:64:f5:95:0c:d0:51:55:b9:
98:6d:c7:5c:75:30:a4:b8:d9:7f:b1:ef:97:e8:de:
3a:b5:97:60:f6:ab:d6:33:6f:e0:4b:e9:f8:c1:ec:
2f:b9:d1:8c:81:35:bd:40:ea:a2:8c:f9:e8:7b:7a:
7a:05:0d:c1:35:1c:c6:d4:94:5b:4d:60:d1:ef:50:
43:61:86:9b:93:9a:4b:cf:13:44:d0:82:4c:18:23:
87:2f:d9:5a:09:ae:a4:eb:39:35:cf:92:be:0d:33:
ea:a2:6c:8e:8c:8d:c3:1a:a8:3e:35:80:c0:d2:11:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:B5:96:50:56:AD:B5:F7:DB:76:E3:0C:B9:47:D7:8B:0E:18:DA
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d8:e4:40:c9:6c:04:5a:01:9d:b4:36:d8:d3:37:e7:8b:79:
e2:ff:ff:80:05:58:3d:14:80:b4:69:1d:65:b8:09:b9:b5:d6:
fa:dd:a7:ac:04:25:d4:2c:85:96:d3:0a:5d:de:50:66:46:11:
ec:8d:03:3f:47:0d:86:b7:89:b9:2c:e0:85:e9:03:82:b1:6c:
2a:92:ab:b3:18:73:8b:cf:81:e5:af:84:b3:1c:c2:25:44:e2:
91:9d:d5:b0:4b:48:2d:ef:e7:82:11:9e:36:29:86:21:5f:f0:
f2:ee:84:ed:e6:78:d1:46:09:08:9d:d8:07:92:80:3b:d9:48:
dd:b9:a6:8f:39:3a:4e:d0:95:ec:dc:28:74:d8:33:d7:6f:81:
c4:81:80:72:d1:ef:23:df:25:bd:19:51:01:72:e3:4b:3c:5f:
a7:3a:bf:52:18:47:27:6c:8f:8e:05:1e:47:03:f6:98:24:6a:
8f:b9:41:38:e9:29:a4:58:35:a8:13:61:6b:38:4c:9c:e7:da:
2e:ad:c2:48:d3:b0:45:ae:08:1b:0e:a3:3b:90:ef:6b:9d:1c:
cb:f3:d5:7e:ec:00:a5:e3:f4:f8:a0:1c:49:69:89:88:5b:19:
16:35:b9:22:b4:68:c8:e8:fa:a9:7b:67:e6:18:75:9c:6e:ad:
30:00:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:13 2025 by rpki-client