Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: vXOUMURBPMkfJW+qby2R/OM/CEjJNzd6AJYIqoYDlgA=
Subject key identifier: 8D:77:23:1A:1F:79:43:34:DE:EB:20:A5:30:37:C0:2C:53:11:49:D0
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 019921E7C3D4E394B012F0FC3C3F886E0E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: F2
Signing time: Sun 07 Sep 2025 02:01:01 +0000
Manifest this update: Sun 07 Sep 2025 02:01:01 +0000
Manifest next update: Mon 08 Sep 2025 02:01:01 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: aGhtg7Q/b78QDuwgZ/P+n9krv0BRxSD4Dgx03lLlhoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:c3:d4:e3:94:b0:12:f0:fc:3c:3f:88:6e:0e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Sep 7 02:01:01 2025 GMT
Not After : Sep 8 02:01:01 2025 GMT
Subject: CN=8d77231a1f794334deeb20a53037c02c531149d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:d6:03:60:c2:04:b6:cf:b5:27:5a:1c:d9:
50:58:e2:46:28:a1:bc:46:84:5e:29:89:77:07:00:
e4:ff:1f:e7:c1:8d:25:a9:d4:86:d4:28:b7:4c:5a:
3d:a6:d0:e1:f0:25:33:68:3c:64:38:25:b6:2e:35:
40:4b:ff:87:cd:f5:19:a4:9d:a9:dd:34:8c:e8:84:
67:55:34:45:b8:f7:87:6e:93:25:48:92:4b:06:3b:
7d:f9:cf:c2:1a:03:1d:7b:d8:a5:8c:bb:fa:54:6f:
c5:f8:9b:be:29:42:78:77:50:3f:85:82:cd:02:cf:
5f:91:3d:74:b3:12:18:dd:91:9b:58:c4:bf:c7:47:
66:ef:ba:88:09:dc:38:95:04:3e:4d:d1:3d:e1:78:
04:f1:11:91:71:b1:bf:34:16:4b:07:35:36:59:38:
4e:a2:c1:b5:c1:a3:6d:ed:e0:e4:10:e6:2e:3c:de:
9d:d3:8e:60:f1:b5:6d:27:07:fc:07:e2:7a:4a:28:
e6:5f:61:f9:c1:c3:7c:16:88:65:87:a8:de:58:2b:
b2:c2:02:c3:83:dc:1a:ed:7d:57:73:2f:9d:f8:8c:
a2:11:7e:be:6c:64:af:ae:85:c1:8a:9d:c3:a9:36:
71:6d:8a:6e:fd:7b:00:08:31:12:37:18:8c:f2:8a:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:23:1A:1F:79:43:34:DE:EB:20:A5:30:37:C0:2C:53:11:49:D0
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:72:b4:0b:8d:33:a8:5b:85:f2:e4:36:8f:39:50:8b:c6:8a:
19:09:3f:4e:b3:f8:20:ff:82:e0:53:33:b4:85:a5:cc:e1:f7:
4b:e6:20:56:5c:64:c9:9d:fc:a5:5d:c2:34:3d:84:14:0f:09:
ea:87:b6:78:76:a4:fb:84:80:20:5d:a8:4d:0e:52:00:28:b1:
2e:14:2a:03:55:bc:99:5d:a0:93:e6:3d:e0:a2:36:cd:48:6e:
f3:df:10:a9:8d:a2:ac:44:03:f3:a8:fe:43:e1:5d:de:f2:52:
28:13:ac:19:ab:0d:ee:ab:ed:87:81:24:6a:de:46:3c:1c:23:
74:15:34:36:60:38:5a:7b:08:88:66:38:77:8c:93:c1:a9:d5:
12:6a:f2:3d:54:ce:32:63:e7:1c:ee:1f:6e:37:f7:b3:b6:f1:
94:8f:11:74:2e:a8:19:c6:f0:81:b3:6f:cb:1f:92:6c:db:8d:
34:5f:81:48:9f:0f:cf:04:d3:29:5b:b4:b0:f8:a6:f5:7c:49:
38:e1:fc:a5:c6:38:41:d4:49:c3:c7:f7:41:8c:bc:40:a1:85:
d3:2e:51:9a:72:5e:62:64:ed:fb:00:e2:fc:dd:39:f5:37:20:
20:a2:eb:f8:99:64:e4:eb:2c:26:a1:35:b6:27:2a:3d:77:e8:
49:95:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:53 2025 by rpki-client