
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: aUB8l7/VwHMZTvWsTLnCX+D1ZH7V4w61qxxq56TlgeU=
Subject key identifier: BD:14:CA:A4:4E:21:03:30:08:7B:98:90:C0:03:05:73:BE:32:28:83
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019916F65B786E52138E336707EE023FC3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 1639
Signing time: Thu 04 Sep 2025 23:01:07 +0000
Manifest this update: Thu 04 Sep 2025 23:01:07 +0000
Manifest next update: Fri 05 Sep 2025 23:01:07 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: sz9yZi+ca/yeremPp6JPzEVtJp+XEk0zqem7K/OYmbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:5b:78:6e:52:13:8e:33:67:07:ee:02:3f:c3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Sep 4 23:01:07 2025 GMT
Not After : Sep 5 23:01:07 2025 GMT
Subject: CN=bd14caa44e210330087b9890c0030573be322883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:77:41:ba:13:20:21:e4:a9:3e:12:52:cc:
24:14:fe:3c:6a:74:12:97:25:61:7a:a6:0e:70:c6:
33:93:06:43:f2:3c:ed:f7:06:fc:77:f9:23:62:eb:
91:6e:03:f4:dc:ad:a9:0b:1a:49:fa:bd:77:ae:c6:
33:f2:aa:49:b0:fb:2c:c8:c0:e0:db:7e:cd:ef:e9:
e3:5d:17:58:d6:53:48:66:c3:fc:04:6a:57:97:68:
9e:cf:64:80:00:ec:9f:c9:1b:b5:03:f9:fc:89:03:
ef:59:bd:cc:5f:c5:71:8b:94:64:cd:7e:c2:6c:40:
8b:7f:a5:5b:96:2d:df:2d:a1:1d:09:14:4e:51:3d:
a5:40:f2:0f:f9:f0:5b:1c:0a:f1:f6:c9:99:b6:13:
6b:9e:2d:d9:65:94:83:6f:67:96:a4:f5:1c:89:30:
22:4b:5b:22:75:42:f1:4b:3e:ad:d6:92:7f:c1:35:
52:88:18:c7:fb:d5:cb:ca:1f:0c:31:ed:b9:63:71:
c5:ce:62:36:12:d1:23:49:c8:9d:10:e3:45:fb:af:
d7:ae:5c:de:4d:09:9b:f2:a3:6c:54:d1:2d:6d:58:
95:fe:98:13:c6:88:58:d6:96:81:b0:1f:45:6f:ea:
3f:a8:ae:23:84:51:f1:2c:7e:78:84:fd:e8:bc:f4:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:CA:A4:4E:21:03:30:08:7B:98:90:C0:03:05:73:BE:32:28:83
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bc:2c:13:cf:c8:a1:03:4f:a0:60:9b:bd:49:b3:b0:41:3b:
fe:ef:e3:a3:39:10:3e:81:97:1e:33:93:c1:50:da:50:d3:d3:
34:cb:06:2f:bb:70:c2:fd:19:9f:25:18:ba:29:3d:b1:30:62:
37:3a:41:29:a9:89:09:54:50:ab:09:d5:a4:42:7a:b7:ea:ee:
40:98:f7:2c:fa:c5:f8:d9:3d:3d:b8:8f:8f:6b:ca:ba:8a:47:
09:75:05:db:cf:da:60:9d:41:aa:28:4b:e2:0c:32:35:5f:46:
28:54:ec:f3:43:43:b5:46:5c:f5:7d:2b:74:6b:d8:2a:5f:5b:
2f:2b:f1:23:11:95:06:23:b8:2e:32:54:97:04:76:7e:40:74:
e9:23:ee:6c:b1:50:94:04:e6:42:77:17:10:19:8e:78:dc:cb:
34:3b:1a:1d:78:6c:e8:ae:7b:e2:37:c4:61:74:c0:35:7b:40:
ee:0b:b7:ad:6d:7b:40:93:ab:7e:0e:cf:7e:c8:06:71:46:0d:
10:f8:84:41:5c:1e:50:c1:05:01:2f:f9:8d:29:ec:f9:cc:b3:
fb:e0:52:19:10:9a:68:89:1b:43:07:b5:f1:97:ef:59:97:b6:
38:6e:2b:31:56:15:58:9d:2f:86:79:04:11:1e:0b:40:ed:55:
9f:26:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:54 2025 by rpki-client