Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: I0Kz+oLNBGE002dBRxlaro73vKdFzy2IZZrFq9At5M0=
Subject key identifier: AA:1D:BF:D2:C3:DB:9F:AE:40:1F:C8:C1:DF:90:37:93:2D:B2:F9:17
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 019923A07086888FBF6E4BB0423D563E60E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: NVZ/MS2mTeMlu5N9LmhKxj9wF240TRvCSBYXBcPBqIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:70:86:88:8f:bf:6e:4b:b0:42:3d:56:3e:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=aa1dbfd2c3db9fae401fc8c1df9037932db2f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:01:4d:4a:30:83:06:6d:a5:60:81:99:33:
70:48:33:98:7c:f6:89:7a:2e:ca:0e:09:7a:ae:ee:
b3:f8:8d:11:70:5b:f2:e2:31:85:a0:cb:4b:b4:54:
dc:42:e9:27:5f:ea:b6:23:87:8e:f3:2e:c3:16:cf:
17:f3:7e:8a:3d:6c:eb:ba:73:83:58:69:1f:47:a0:
c1:a5:6c:e8:ee:ab:85:70:68:46:cc:f0:34:b9:b8:
bb:52:9c:af:ff:2c:12:45:c2:85:69:b7:45:74:03:
71:9b:b5:63:2c:4c:b1:a9:d6:fd:3b:95:9d:b2:d1:
a5:01:c1:33:e0:45:8c:c2:a9:3c:9a:64:0b:14:30:
2c:5d:d2:ea:d2:4a:77:85:c6:04:84:55:fa:b7:8b:
cc:a6:06:1b:f9:28:6c:5f:01:3c:51:ec:c9:3b:08:
a5:05:f4:ea:6f:eb:bf:77:bc:d6:68:b5:aa:49:80:
3c:f9:d9:27:cf:56:c4:ab:e2:93:fa:9d:67:c4:1a:
c7:64:df:3c:ea:71:e0:7f:e7:8a:eb:a6:0c:66:41:
ca:a5:03:7c:7f:52:29:64:02:07:d5:bd:e4:72:f1:
5a:fa:3b:77:bf:b4:87:fb:f9:c4:9c:53:be:4f:fd:
b0:fc:10:2f:8f:60:fa:e7:36:ef:ea:6a:c8:44:81:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:BF:D2:C3:DB:9F:AE:40:1F:C8:C1:DF:90:37:93:2D:B2:F9:17
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:04:09:39:56:f8:67:fc:08:da:35:7f:9b:16:15:57:4d:ab:
92:7a:99:0a:d2:b4:ca:1d:f7:dc:23:a5:7e:cd:24:79:b3:91:
54:ac:bb:74:67:a0:0c:39:64:79:30:d8:64:b8:fe:36:92:c6:
68:23:f1:7e:f9:d5:80:c5:47:d9:94:b1:8a:81:9d:8d:9f:4f:
98:52:00:e3:9e:2a:c7:b1:97:fd:2b:15:2f:d8:21:14:fe:36:
a3:74:ed:03:3f:9d:88:4e:7c:6a:b9:e5:aa:7a:12:57:b3:e8:
cb:c3:4e:a0:01:08:12:d8:c6:27:9f:98:7c:50:a1:45:b4:28:
2a:15:37:8b:d2:84:38:10:cb:6f:17:e0:57:dd:e7:d5:5c:af:
7c:e0:66:0c:c0:dd:1b:5e:41:78:02:5a:13:2c:9a:ed:5d:69:
41:7f:1f:79:b7:43:18:12:b7:48:1c:46:3a:60:fd:75:b2:0e:
8f:96:d7:c8:69:5b:4a:13:4d:02:c1:fa:48:ed:fc:2f:01:84:
a1:ca:05:0f:77:ab:27:96:0c:6e:51:89:5f:a0:87:24:b2:72:
17:46:fc:2c:54:a8:2c:ac:b9:1a:8f:c7:e0:09:b8:5c:da:81:
e6:7e:32:16:4b:1c:ad:50:46:62:f4:40:74:72:e0:b5:09:ed:
b1:e2:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:18 2025 by rpki-client