Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: wqkP1buhdwyBcYTlS4i4LySmakkPQY6yGtZtHrqPX7c=
Subject key identifier: 34:8A:6F:82:19:5A:92:F3:2C:4E:10:B3:84:39:0D:2C:0A:23:57:03
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 0199239F39C33E5FA1D1423BA46DBEE7A874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0BC8
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: Lz+INvL3mr/LwVS9BNc+ZCa8iHVO3fCM7Ytyh5xmIqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:39:c3:3e:5f:a1:d1:42:3b:a4:6d:be:e7:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=348a6f82195a92f32c4e10b384390d2c0a235703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:8e:72:b6:3a:98:1e:ed:44:9c:32:91:f4:
80:83:c3:4d:db:3b:f6:93:3e:4c:45:ef:e9:f2:4d:
fc:4a:a5:8c:68:70:0f:03:d4:11:26:4f:ad:56:e0:
62:42:a0:79:09:44:53:cc:cc:6b:09:4f:48:68:17:
e8:34:b0:41:31:44:0b:7a:36:d9:3c:fa:a8:b9:c6:
6b:95:2b:39:cd:c5:20:1f:7c:db:f8:37:81:81:07:
88:9f:7e:71:dd:c6:8c:ba:4e:e9:95:7d:22:93:75:
15:d5:5e:e5:f3:4f:dc:8e:05:d3:77:2c:94:da:6b:
62:fe:a9:b6:42:f9:2c:58:7d:78:a6:ef:07:41:d4:
d0:60:44:50:3a:57:ba:ba:a4:45:a0:8d:84:31:ba:
96:f9:4c:72:04:fb:0e:36:55:ff:07:12:c7:4c:d2:
cf:cf:f2:86:5d:b1:fc:4f:82:41:c7:6d:35:70:ce:
17:40:54:b0:4a:c3:9c:9e:78:ce:2e:77:58:16:f9:
a4:fa:30:f3:32:43:21:d6:b0:06:f3:dc:32:5a:55:
6b:52:e9:47:70:06:d0:53:a5:7f:06:95:01:37:b9:
fa:c4:68:ee:ea:70:5d:68:70:4d:17:00:28:43:a7:
36:af:82:96:f8:79:b6:bd:0a:68:b2:cf:0d:31:74:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:6F:82:19:5A:92:F3:2C:4E:10:B3:84:39:0D:2C:0A:23:57:03
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:08:5b:41:36:30:02:3c:9d:36:4f:17:e8:aa:10:95:5a:
93:cc:bc:04:56:d6:f5:e8:87:2a:cf:28:46:59:bd:ca:3d:e2:
1e:ad:7a:11:fb:ea:2b:42:b0:b7:80:19:92:99:d3:af:06:de:
b0:6b:08:13:fe:4f:59:4d:48:1d:06:fa:bc:c1:5b:ed:cd:16:
23:d4:3a:02:e8:89:15:ba:22:22:b7:bc:d7:43:47:76:37:3e:
df:0b:8a:01:ee:88:dd:be:b2:b6:64:03:03:77:b7:0d:e4:fa:
84:b6:33:72:09:09:41:e8:cd:d0:cb:09:8d:1b:c0:2a:12:f7:
3d:2d:7e:1e:2d:0a:ff:c3:e8:20:d7:6f:f7:f5:0c:77:84:f3:
bc:8c:38:55:7a:40:b1:6b:83:ee:8f:0e:c7:f4:77:24:df:8d:
8f:26:6d:b4:c4:58:b7:9b:67:ab:0e:bf:a4:00:f2:98:c6:90:
30:85:50:5a:18:89:12:e0:5e:53:35:fa:6c:19:99:0e:ca:d5:
40:f4:f2:33:a0:2b:1f:bf:6d:55:04:00:a9:11:e8:48:56:65:
05:6a:4b:c0:6a:a6:b3:63:7a:cc:72:e2:8d:89:54:c3:4a:f4:
ef:a8:0a:b6:36:23:93:2f:53:b4:fb:db:5a:36:b9:0a:7a:ad:
b1:2a:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:26 2025 by rpki-client