Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: IbUO98/y9BqMDyh5R/FDutbkx9NmX+w1qrUmySOhw8o=
Subject key identifier: DE:42:D3:E7:B8:33:AA:C6:20:4A:F5:6A:BC:DB:6F:37:BA:52:FB:34
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 019849D2F9449698B63E18CD08700A864F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 037B
Signing time: Sun 27 Jul 2025 03:00:19 +0000
Manifest this update: Sun 27 Jul 2025 03:00:19 +0000
Manifest next update: Mon 28 Jul 2025 03:00:19 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: w/UyEgUXeqJNynUkCTcZkQJjFylHkpXE7MFZ4qyMrqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f9:44:96:98:b6:3e:18:cd:08:70:0a:86:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Jul 27 03:00:19 2025 GMT
Not After : Jul 28 03:00:19 2025 GMT
Subject: CN=de42d3e7b833aac6204af56abcdb6f37ba52fb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:f1:b9:c6:b0:6a:d0:65:64:df:ee:55:b6:
20:5b:d3:bb:bf:f4:3e:1e:d1:fc:f5:31:55:9c:c0:
ba:0d:b3:36:23:ac:11:2f:f4:95:16:7c:ed:39:53:
66:d2:40:1d:ab:df:e7:d4:ff:de:f2:76:48:e8:f1:
90:cc:63:c3:33:5a:ab:13:40:c2:90:4d:ed:8f:ca:
06:aa:80:83:32:6b:a4:9d:f2:23:c2:dd:b5:b4:f9:
06:43:59:99:d0:2b:ce:6d:1d:93:5d:d2:95:a4:97:
a1:c3:65:16:24:04:f8:60:95:ee:b9:5a:02:9d:32:
dd:d1:80:e6:b9:5c:bb:80:80:15:38:9a:c2:e9:f9:
a5:08:b3:a7:90:be:1a:91:e3:f9:14:77:7b:c6:69:
9d:b1:1a:42:59:52:2b:ff:d9:1c:c8:7f:84:7d:b9:
62:b5:c6:ba:1e:83:52:0b:9a:0a:12:9a:51:61:66:
c5:bd:67:f6:2b:ba:b2:50:9c:f4:3d:d1:35:cb:c0:
e5:48:ec:87:92:ad:52:9b:24:36:ca:7f:1a:d1:d4:
3d:a3:d6:79:41:76:61:dd:40:a8:f9:b0:f5:7e:6d:
e9:94:47:b4:1e:28:4f:e3:7a:05:ee:b1:4f:e0:41:
4f:68:6a:11:9d:e3:43:ef:ea:b5:25:27:d0:6f:a2:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:D3:E7:B8:33:AA:C6:20:4A:F5:6A:BC:DB:6F:37:BA:52:FB:34
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:81:5e:de:79:85:91:36:ef:0e:dc:ab:92:03:f9:c8:c2:
ae:e6:09:6d:47:08:d8:d4:aa:b7:b7:0e:2e:e6:1c:b9:7f:a0:
5b:f3:7d:10:c7:7e:32:17:1e:3b:55:af:30:c6:17:e8:4a:fc:
20:0a:68:1d:9e:1a:c5:61:2b:de:f5:d4:d4:68:cb:3c:7b:86:
49:54:49:7f:77:24:b5:6d:0f:12:ed:00:62:72:57:88:41:92:
13:29:b1:ee:ea:fb:fa:9d:fa:a4:18:04:aa:72:87:92:5c:11:
d9:c9:21:b3:d5:98:23:b5:f7:bb:60:6d:9b:5b:0d:19:60:d6:
a8:7c:d1:29:5e:36:99:f5:48:03:cd:d1:88:6d:c0:c3:a9:e1:
f2:97:e3:b0:3f:67:32:0d:e3:6c:ad:3f:ad:eb:14:7e:b8:44:
e6:7f:2f:04:3c:0c:14:3a:22:ec:10:ad:cc:68:d4:f9:28:d6:
94:d3:44:75:84:5f:86:0a:4b:ee:af:1c:15:e6:b5:1d:68:63:
1c:6f:08:cc:f7:88:82:a8:be:69:eb:d0:60:25:b5:5c:54:31:
95:15:b6:e1:bd:ea:5c:17:e9:97:f9:f2:68:29:33:79:45:31:
86:b9:b2:dc:66:f5:d3:85:1d:d5:17:7e:4c:9f:e3:6e:05:49:
0c:0f:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:31 2025 by rpki-client