Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: ULqm3mElxHWndCJKgjf+744d1lG2ysmzgLogPYKQ6cQ=
Subject key identifier: 3F:1F:19:3C:30:83:B7:10:29:22:CB:C2:58:B7:59:FD:87:6D:0C:15
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 019922FA8CE367C71CBA1FE76666E141F203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 070A
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: X90ab11d+5f6P5++eB94tSBjfqUCMkoppSH0LY2hDlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8c:e3:67:c7:1c:ba:1f:e7:66:66:e1:41:f2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=3f1f193c3083b7102922cbc258b759fd876d0c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:42:2b:39:44:fa:f4:50:6c:00:27:22:f1:
e9:c7:54:ec:3f:ab:15:bb:6c:88:f0:19:96:ab:59:
d4:cb:e5:74:1a:ab:1c:be:e2:97:2d:91:f8:d1:b7:
a7:5a:20:43:c7:07:9b:67:3c:39:c9:6a:cd:0b:2c:
af:54:6e:c7:38:6c:3b:bc:7e:b9:ca:6c:60:c7:cc:
2e:b7:65:0d:d2:a4:0b:4e:ad:d6:be:6a:5f:b2:fc:
48:7f:6a:d3:2f:0b:92:5e:e0:2e:92:f3:aa:58:05:
79:c5:50:4e:e0:19:e4:8e:30:06:15:4a:cf:fd:c0:
7a:15:d3:8d:20:66:38:09:ed:98:8e:bc:c0:15:54:
5b:16:07:73:5b:cd:61:44:68:98:d6:84:26:4b:88:
0a:ef:69:6b:36:e3:db:9d:ae:ed:81:5e:89:28:e0:
56:a4:b5:95:73:18:22:35:96:1a:d6:bb:ed:27:01:
5e:b4:fd:b3:17:0c:7c:ae:7f:d8:b0:6f:53:0c:cf:
0a:53:c8:e4:4f:de:73:6f:e0:3f:ea:2b:a0:79:c9:
71:8a:4c:38:d6:27:07:b2:ee:e2:34:19:8a:15:07:
43:aa:78:18:8d:80:03:71:da:a8:78:1e:ea:df:c8:
b4:1f:9b:35:ef:a8:e4:c3:f4:27:64:84:79:90:6f:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1F:19:3C:30:83:B7:10:29:22:CB:C2:58:B7:59:FD:87:6D:0C:15
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8f:e7:9f:53:3a:bb:42:b9:fe:ab:96:af:fa:b9:c0:97:1c:
67:37:1a:75:9d:5c:6c:07:5f:0c:8b:ac:a6:c5:30:f0:8e:92:
8e:f9:56:ce:14:54:10:c4:22:e0:5d:7d:89:91:f7:02:96:51:
27:31:68:64:b8:a9:11:90:8f:bd:9a:7a:5e:68:3c:c8:95:40:
5b:87:2f:9b:54:91:ba:8f:1e:02:69:a6:1c:60:6d:20:e8:06:
5e:64:80:7b:88:d3:b8:55:67:ac:dd:a0:1d:5f:5d:32:75:95:
2a:24:59:bd:38:ea:5a:83:3a:6b:91:62:b1:15:c0:27:69:cd:
8b:29:5e:51:cb:d7:2e:4d:9b:70:c1:08:c8:74:ae:04:9f:48:
ef:1b:22:b8:78:69:b2:a1:7e:d8:08:2f:5b:2a:d5:ab:1c:a3:
ff:b3:a7:53:ff:3f:77:88:65:41:50:ff:e7:45:13:37:94:31:
38:e3:77:34:79:55:d9:2f:4f:c9:04:5a:b2:7f:32:6c:69:e8:
61:b9:27:ec:d7:ef:e5:fc:40:6b:d3:05:2b:4e:04:5a:19:36:
26:1d:ac:67:96:8d:4d:3b:65:6b:a1:53:23:6d:e6:86:e9:37:
c6:08:b3:47:b5:8e:17:8f:59:46:de:72:24:15:c7:5e:f9:7a:
70:51:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:38 2025 by rpki-client