Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: PVLLOA+YIUW1hw20t4Vw3pJ62YCIsWfOqy9qwXWJHTY=
Subject key identifier: 95:AD:0D:C2:3B:7E:26:2D:FA:D4:47:52:09:B2:1B:3E:BB:54:83:3D
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 019921B1B8B240B9529C4CA7E4A37112751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0F6A
Signing time: Sun 07 Sep 2025 01:01:59 +0000
Manifest this update: Sun 07 Sep 2025 01:01:59 +0000
Manifest next update: Mon 08 Sep 2025 01:01:59 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: 3hLlXivnkAvlz9nTyiQWONgX/C36PV94P2KtJ2L29dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:b8:b2:40:b9:52:9c:4c:a7:e4:a3:71:12:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Sep 7 01:01:59 2025 GMT
Not After : Sep 8 01:01:59 2025 GMT
Subject: CN=95ad0dc23b7e262dfad4475209b21b3ebb54833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:41:07:a1:8c:46:6f:6a:09:e3:12:0e:4a:
b0:61:64:d1:1b:4f:06:83:03:db:1b:c2:8b:30:7b:
48:99:c6:01:fc:ff:64:13:0e:e9:76:5e:3d:fd:08:
b4:26:33:4f:1a:39:72:6c:b1:d8:e7:fe:1d:4a:1d:
ea:aa:db:d6:be:fc:c1:20:d2:5c:74:16:cd:3f:8d:
e8:3c:97:84:d2:47:20:eb:6d:0f:77:74:f2:48:38:
63:64:82:e1:d6:fc:d4:82:3a:f3:da:e9:d2:95:ea:
0e:c8:2c:6f:63:c7:62:57:66:f4:ef:9a:51:fe:e1:
0c:e1:9b:92:0a:73:4a:88:08:82:29:a8:f2:01:9c:
a1:07:44:2b:5b:bc:14:f7:2e:da:62:88:71:6b:ca:
fe:fc:ea:e7:59:8e:02:96:f7:90:4c:cc:8c:1e:3d:
ce:8c:37:ae:f6:35:c5:1d:ae:37:55:b4:76:83:64:
0d:0b:8d:fa:c9:c8:5c:3b:48:0a:69:73:dc:5a:f7:
df:6a:8a:81:db:1e:a3:eb:03:1b:57:e1:a8:c4:a3:
fc:4b:c6:16:40:46:04:a7:f6:8b:2b:a8:ed:6a:c5:
22:db:8a:90:dd:8c:10:ba:cd:3a:7d:49:f1:1e:e0:
1e:29:b1:66:b2:c8:8e:6f:2b:6a:82:03:5d:58:64:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:0D:C2:3B:7E:26:2D:FA:D4:47:52:09:B2:1B:3E:BB:54:83:3D
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0f:c5:e6:e1:17:f7:52:fc:ef:d4:5c:5e:1b:93:15:f7:db:
3c:a7:56:ee:5c:2b:6b:f9:ec:44:cd:b9:fe:67:0b:a5:cb:cb:
5a:b7:a1:ca:45:d3:80:ed:f9:0b:c9:ad:8b:5c:ad:4d:61:6a:
0f:84:30:1f:27:79:04:1f:7b:07:4a:c5:4e:62:b2:28:76:93:
2f:0d:d7:35:22:04:e4:fe:71:11:1c:a6:cc:69:8d:bf:5b:14:
13:77:01:fe:b2:9f:cd:35:33:9b:54:70:ab:3c:01:7f:28:91:
b7:13:14:a0:88:f2:28:c8:33:67:df:0e:00:20:5a:dd:bc:33:
b7:fb:e0:12:06:7f:3e:d0:d2:ec:16:44:b1:a5:89:9e:8a:d7:
46:6d:24:d2:8d:27:66:ea:da:2b:37:05:fa:a5:5a:72:30:fd:
b1:ba:5e:c6:07:22:5d:3a:96:ce:56:49:05:f6:55:42:3f:a6:
d2:d1:b6:c1:91:3c:67:80:e1:76:f7:ba:c2:63:02:18:64:78:
96:32:e2:b6:23:5a:a9:92:fe:86:0a:37:ec:7b:a0:0b:a8:48:
6a:ac:0b:59:eb:a6:b6:3f:26:7a:dd:25:bb:29:5e:85:6e:1a:
18:49:dd:dc:f8:4e:32:5b:ae:05:8a:a5:ec:3a:ac:a9:fa:92:
d7:a4:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client