Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: LyOwY0eH21wQYASuakuQM5gJUqGseYHUU04koR+X00Y=
Subject key identifier: 2C:55:2C:B4:EC:7A:7E:F3:06:A2:8F:7F:C8:45:2B:0F:A1:34:AF:F0
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 019921B0E956636DED9C65C5A51B626F5F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 03F7
Signing time: Sun 07 Sep 2025 01:01:06 +0000
Manifest this update: Sun 07 Sep 2025 01:01:06 +0000
Manifest next update: Mon 08 Sep 2025 01:01:06 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: AcTeD/fScrCEkAWQcg6TWOVFq4B+U8NjA2p+Os65eZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e9:56:63:6d:ed:9c:65:c5:a5:1b:62:6f:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Sep 7 01:01:06 2025 GMT
Not After : Sep 8 01:01:06 2025 GMT
Subject: CN=2c552cb4ec7a7ef306a28f7fc8452b0fa134aff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:ae:8c:7c:ed:57:3a:b8:ff:08:e3:43:c3:
60:1f:81:a2:31:4e:fa:6b:8d:83:d2:2e:db:e5:8e:
e4:18:ec:79:b2:66:95:42:f9:d9:d9:db:6a:da:8c:
6b:07:da:f2:ad:d9:ab:60:ad:c6:b7:f5:49:09:15:
89:69:23:9c:bc:57:14:8c:55:bc:25:a2:7f:83:6b:
8b:d3:56:3a:d7:23:b6:62:77:04:fb:2e:ed:25:91:
6a:46:59:9d:86:2e:54:4b:42:f7:47:66:fd:5b:c7:
07:aa:2e:ea:5b:05:26:25:8b:3c:d3:83:d7:7f:17:
08:07:31:45:9d:49:81:b7:63:01:81:59:e2:c3:f9:
8f:d2:ed:34:8a:d6:4b:3c:8d:a7:48:8b:d7:02:6c:
10:11:61:c6:fb:bd:f2:e6:f5:08:f7:ad:c9:89:80:
c7:0c:5f:6e:61:fe:9d:3e:d8:27:ee:2f:7a:8f:87:
f7:90:92:fc:df:84:6d:3d:b0:43:9c:07:83:64:83:
fa:ce:95:6c:09:b0:fb:da:6c:60:e8:72:d5:41:21:
cb:99:8e:ec:52:64:29:60:e1:b7:08:58:27:7f:e9:
72:fa:79:58:bb:f5:53:88:54:5b:37:3d:5b:be:27:
b3:97:ef:73:ab:a5:dc:b3:85:75:41:f6:57:e0:c8:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:2C:B4:EC:7A:7E:F3:06:A2:8F:7F:C8:45:2B:0F:A1:34:AF:F0
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:58:66:a7:dc:d4:7a:0d:4e:3c:14:4f:74:c9:f8:4c:d0:5c:
64:10:f1:52:e1:13:70:b3:d9:cc:bd:c7:05:8a:e7:e8:61:8c:
59:68:56:f7:99:4b:30:3d:37:2d:3c:12:6f:60:00:f8:c7:7d:
24:6c:18:1f:09:e3:1c:0b:7c:2a:f9:bd:28:db:3d:b8:8e:01:
31:ee:a3:9a:cb:69:df:28:4b:11:43:58:a5:10:ed:a9:ff:f8:
0b:04:a8:d7:5a:e8:50:9a:de:df:58:60:bb:e9:17:8b:61:81:
b6:d1:2e:71:6b:a8:b8:01:75:12:a8:3b:d2:8a:47:5d:4c:85:
36:b1:da:69:75:40:b4:c1:71:29:1c:2d:10:63:d8:97:e3:c6:
0a:c2:91:c9:c5:ad:ef:a9:7b:a2:d5:79:30:e8:35:7d:3b:b4:
39:7b:d5:4f:19:a8:af:ca:24:e5:19:7a:bd:9b:f3:a7:d1:d0:
63:a2:ad:f8:71:b6:38:0b:3c:f1:8f:45:d7:fb:16:de:dd:11:
d5:e1:ad:76:41:4b:cd:cc:89:f4:95:a9:19:19:ed:d6:3b:6d:
cd:5b:1c:2c:d1:b5:4d:5b:46:41:ab:40:c3:13:84:b2:6a:25:
8a:1f:c4:67:1c:1f:d6:f1:fa:fa:4a:34:24:1c:7c:24:d8:30:
3f:56:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:27 2025 by rpki-client