Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: kv1FOq6CBPMFSqUB362b+ODkwWMGpABW1/EDDgbdNuo=
Subject key identifier: 8F:2E:CD:C5:78:CC:2F:BE:A3:6B:47:9D:79:06:E6:08:86:CF:5A:89
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 0197488C92F6ECACA063AD7DC2B97F07D06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 07C8
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: SejRTCcQaHLDyhOuZcVOtWpUxQjtu2dk/Rlz70PkTsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:92:f6:ec:ac:a0:63:ad:7d:c2:b9:7f:07:d0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=8f2ecdc578cc2fbea36b479d7906e60886cf5a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:4f:36:68:87:87:45:59:c4:65:0c:f2:61:
c9:fd:02:28:56:98:d2:d7:44:54:3b:17:21:c1:92:
b9:9a:0f:0a:34:fc:c1:8b:af:52:69:e5:2d:8e:be:
de:58:e5:7d:2f:c9:7c:e2:4d:69:6a:89:c7:56:f5:
42:a9:c7:ea:a3:a9:f3:eb:e8:b4:2d:78:d1:4b:4b:
5e:b9:f4:c3:80:dc:12:e1:d3:55:71:9f:ed:65:be:
d0:06:ad:48:91:e6:0e:ba:36:b2:8f:27:71:5f:67:
58:f3:d9:1f:eb:4f:89:b1:5d:e6:9a:08:34:c8:ce:
2e:ce:76:15:8e:37:bd:09:d8:c3:51:e3:83:b7:4c:
73:ce:c6:2a:b9:51:a1:96:a5:1c:3b:ce:06:de:c4:
9e:0f:4f:77:77:fa:12:e2:46:49:b7:ff:a9:98:4f:
32:48:39:8e:35:97:19:b5:41:89:5b:b0:5e:20:11:
55:67:db:29:3d:c8:cc:32:14:c3:0a:c4:2d:0e:cc:
c1:d0:87:79:09:da:b0:5f:18:65:70:d7:1d:40:fa:
b0:07:79:00:3d:4e:00:9b:ed:c5:79:15:75:66:1a:
d9:e7:21:e3:40:f4:7d:79:ee:c1:92:4e:67:2e:71:
c0:3d:f2:d3:e4:7c:a4:b9:e0:bd:6f:91:b9:59:e4:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:CD:C5:78:CC:2F:BE:A3:6B:47:9D:79:06:E6:08:86:CF:5A:89
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0c:2d:cd:c2:4e:e2:bb:a9:9d:c1:d7:02:84:22:5d:a5:e9:
ab:a5:0c:e4:2d:c6:cb:1f:b2:e2:38:ff:db:87:2f:b5:f6:6f:
53:82:cb:7f:89:fd:95:a5:c1:3b:90:56:28:63:8c:a7:e0:23:
1c:a4:8e:a0:84:6b:56:3d:69:e9:9f:aa:7f:16:bd:8a:59:a0:
6a:3b:b8:13:20:5f:bb:6e:6a:90:1e:18:6e:be:cf:3f:80:7d:
50:09:1e:c3:94:29:d5:b9:f7:4b:f9:bd:37:e6:77:57:26:8a:
34:62:d3:82:b0:e1:bd:0a:3a:b5:fe:cd:ee:09:56:6b:f1:56:
0f:a4:81:78:ca:8f:9c:44:1c:2e:0c:9b:cc:e3:83:f4:87:ab:
e0:ae:8c:7c:fd:e9:f4:31:ee:35:4c:38:e4:f6:19:b2:ff:14:
c9:f5:a2:75:ab:13:8d:e5:37:9c:cb:39:31:d6:a4:d6:a7:9f:
b6:91:91:a0:b2:c7:86:84:be:98:d9:e3:d0:18:29:12:b1:e5:
ef:3d:c8:4c:36:38:c5:a9:38:d9:2b:e1:67:4d:cc:a4:4b:25:
fe:13:59:97:71:ba:bb:b6:b9:4c:8f:4e:03:c9:4b:53:8b:fe:
f2:79:e6:3e:c8:79:3d:fa:cb:13:89:de:63:77:75:de:bf:ba:
4a:b1:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:42:31 2025 by rpki-client