Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: ryw+uL7DfezAhPqjSgfXJNnkMKI0GprjZKs+BupP4VA=
Subject key identifier: 69:3D:65:69:6D:71:52:15:91:5F:8E:32:A5:E8:02:09:DF:5C:C8:63
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 0199239F3B7D50764205573A397012D602A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 1027
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: 2RD0ThbeLYRV/2QHKVAV+IYBDnAN3FlENzVpDUBD12s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3b:7d:50:76:42:05:57:3a:39:70:12:d6:02:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=693d65696d715215915f8e32a5e80209df5cc863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:99:52:3c:d8:08:9e:01:57:f0:17:13:b4:
5f:ef:39:10:f7:ab:a6:b5:70:96:f8:a2:5a:43:5b:
f2:9f:0b:20:7e:8f:2f:34:47:0e:65:c1:c2:83:14:
5f:0e:29:42:4c:42:e3:69:b4:18:70:a7:65:7f:52:
3e:f1:7e:1a:e2:56:b0:28:08:d7:4d:12:6a:12:02:
45:f7:51:f9:e0:d8:f0:e7:96:d3:a5:c4:3a:63:45:
49:1f:70:44:2f:a9:9f:be:96:e0:5a:51:a3:0a:c2:
a4:9c:0b:5b:c0:7f:ab:68:0e:6f:8f:d8:2b:98:ad:
bd:16:77:53:49:43:68:a5:2f:ca:e5:ec:b3:34:b7:
84:b6:33:3d:12:56:61:d9:0a:e6:b8:9d:7b:f8:2a:
82:0a:b4:b0:6a:66:c2:6f:9c:d6:d6:fd:fd:3f:8d:
cd:52:be:3c:b3:21:ac:3e:15:ea:6c:59:6e:e3:cb:
2f:57:ec:02:56:9f:0d:ca:7f:4a:c2:80:72:79:01:
64:64:d1:ac:d5:76:42:41:10:82:4e:aa:69:c4:62:
76:a4:c4:9b:bb:04:53:18:ac:f9:95:ee:c5:5d:d0:
f9:32:83:bf:e8:05:01:eb:ee:07:9f:12:2c:50:a0:
7f:b2:be:50:53:96:0c:b9:bf:e4:90:c3:c4:26:07:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:65:69:6D:71:52:15:91:5F:8E:32:A5:E8:02:09:DF:5C:C8:63
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:79:6d:4a:40:ff:11:6c:2e:6a:2a:1c:fa:b9:9e:ca:b2:cf:
40:ce:aa:1c:c3:c3:55:09:60:9b:b0:8e:b9:07:4d:6b:ed:39:
3a:7b:de:c4:72:82:14:fc:3a:af:db:90:b6:a4:ec:20:76:3c:
b1:00:3e:f1:85:a3:e1:c5:d1:3b:a1:5b:a1:5b:37:53:87:92:
08:a9:66:82:12:e1:d5:96:46:8b:98:33:8d:43:c2:8c:ee:0e:
54:33:4f:c7:5d:06:0c:87:7a:6d:53:7a:12:9d:47:40:78:21:
64:79:ca:11:d4:eb:89:8d:30:18:e5:fa:97:6e:c6:4e:49:c3:
bf:cd:c3:62:82:78:6b:b2:ce:b0:6a:73:0c:89:da:86:fe:e3:
a9:70:75:b3:fc:c9:5b:e9:97:cd:0e:5a:5e:f2:22:1d:e1:f9:
4a:bf:f1:32:6e:32:34:be:15:24:2a:b3:c5:3b:9e:6b:e6:d6:
e6:28:af:40:ee:27:5a:89:fa:5c:86:8d:19:56:a5:f5:f4:f0:
23:4a:cc:8a:36:ab:f5:78:05:7b:99:99:3b:17:a0:33:ef:e5:
6a:e6:b6:84:6e:f0:9c:e0:14:34:3e:cc:e0:92:35:db:03:90:
fa:11:2d:9c:9b:2d:91:c0:47:42:6d:f1:d0:ff:eb:a5:a9:42:
cc:52:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:10:29 2025 by rpki-client