Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: r+laXnoIqNEL0ZHe7pbj7HO9KGwiyjWKmNUh9PV+yJo=
Subject key identifier: 58:51:BF:D0:B4:C8:01:6B:65:49:ED:EB:D8:18:05:35:E2:BC:8B:BF
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 019921B249221C526D6C8EA6EC0F2853A139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 08BD
Signing time: Sun 07 Sep 2025 01:02:36 +0000
Manifest this update: Sun 07 Sep 2025 01:02:36 +0000
Manifest next update: Mon 08 Sep 2025 01:02:36 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: RXg5Qs0HRxxLCBOr4a7IdJcadTlArhEcq73j78x7gXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:49:22:1c:52:6d:6c:8e:a6:ec:0f:28:53:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Sep 7 01:02:36 2025 GMT
Not After : Sep 8 01:02:36 2025 GMT
Subject: CN=5851bfd0b4c8016b6549edebd8180535e2bc8bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:82:23:0e:59:ca:b8:10:ad:a2:f9:5d:5e:
6a:e7:6c:01:b0:7a:a8:19:54:b1:14:bf:18:c4:1d:
65:52:6f:6a:c5:ab:74:7b:ca:3e:2d:88:a0:6c:37:
dd:e3:62:da:97:ea:76:b7:d0:65:cb:7a:e5:d0:97:
1d:02:7a:64:e8:ea:03:c2:c3:02:04:00:d4:75:e4:
4e:ea:37:30:35:43:1e:cf:8f:54:12:3a:13:6e:63:
f6:1e:06:33:fa:0d:33:8d:d2:9e:f5:1b:b1:85:02:
4e:ee:48:80:6a:4c:f9:58:22:ab:44:8f:5e:1c:42:
b7:16:f5:2f:3b:6c:a8:63:3a:03:05:e4:ae:aa:21:
8f:d6:eb:a4:3c:53:d8:e7:c9:ca:05:1a:5a:ba:d4:
ae:9f:4a:65:be:17:1f:3c:a3:02:11:be:98:c4:14:
b0:bc:ac:98:97:5e:27:8c:84:53:30:12:dd:b0:96:
63:ce:90:1d:eb:8c:49:ca:6f:a5:b7:53:3b:d4:23:
11:22:e4:43:3d:1a:1c:c1:93:aa:84:ff:85:3d:db:
9a:96:87:e2:3a:6e:09:4b:cf:43:2f:c6:5c:82:2f:
2c:d5:c9:d3:f7:a6:a7:9a:6f:51:d4:6f:31:bf:0a:
73:cd:1b:f9:55:ad:0d:58:df:37:90:d5:5c:ac:b6:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:BF:D0:B4:C8:01:6B:65:49:ED:EB:D8:18:05:35:E2:BC:8B:BF
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:92:96:79:55:12:82:61:9d:41:e0:f9:92:59:1d:d3:30:
09:88:66:e7:f6:e5:d3:63:5a:3e:e1:09:82:bb:24:be:07:46:
17:81:e7:42:1b:24:98:83:2f:13:8a:a3:c2:65:e2:62:cf:2a:
f2:b3:f6:b8:db:24:a4:b3:68:27:fe:e7:65:3a:90:b5:bb:9a:
e1:fd:c7:49:78:19:85:15:07:46:59:9f:fc:8c:2a:11:d2:8f:
9c:ab:d2:ef:10:89:2e:3c:20:87:fd:ed:05:cc:f7:dc:25:4d:
d2:fc:b0:6d:dd:9b:ab:13:ee:97:39:13:26:64:bb:12:e2:80:
48:1a:1e:ef:1a:a3:34:69:d4:9f:f3:ff:e1:6f:65:ea:5f:43:
33:3b:25:54:57:81:76:d1:4f:79:62:42:df:6f:eb:a1:06:15:
56:96:8f:74:d3:3a:c9:2e:d4:61:34:47:b5:0b:04:16:26:a1:
e0:83:c1:95:ad:f9:2f:82:10:05:98:7a:ea:01:1f:b6:77:da:
48:9a:8c:4f:52:c4:cf:48:9f:0e:09:24:f4:91:df:18:8e:11:
b4:49:68:9f:4b:4c:24:6d:46:25:b1:19:aa:ac:5a:2b:81:69:
db:10:2a:4d:78:b1:a0:b9:21:1d:7e:be:81:46:3a:f7:d0:44:
86:76:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:05 2025 by rpki-client