Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: OWckbzigsOMS+e7RliDpjHMbiNe98fqFQUNYGG1RFzs=
Subject key identifier: D8:D0:5C:C9:25:08:66:F5:01:BF:40:2A:F3:E4:AB:B0:6B:97:09:D5
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 0198D5157272FB9D2B2FCC2484BF95AA3B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 0872
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: 9uZACdE6SBXxFntKez7iWJ0gDuKOdvo6MnVbbyMby9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:72:72:fb:9d:2b:2f:cc:24:84:bf:95:aa:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=d8d05cc9250866f501bf402af3e4abb06b9709d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:a2:ce:79:b7:95:c0:be:bd:17:9c:8f:6c:
a1:e6:3e:ff:34:12:01:20:6c:b5:72:77:47:eb:8b:
fa:30:57:07:e9:97:48:58:02:a8:2e:77:ae:ca:f7:
8c:b6:7d:51:c1:c7:24:dc:37:00:e5:98:da:1a:87:
71:ed:90:2f:ff:97:8b:1b:66:79:6a:87:ac:b2:7b:
9b:64:20:0e:82:d8:ae:6b:d2:ec:a8:ca:43:c0:25:
53:4d:60:d9:1c:32:6a:19:55:89:9d:b6:50:51:79:
aa:19:9d:fe:43:5d:a8:64:9c:72:87:b5:c4:52:3a:
63:b9:11:30:0a:18:e1:7a:e3:c5:ef:00:bd:82:c8:
56:be:cc:1d:61:7a:d1:9f:08:a0:de:f3:55:85:06:
06:5f:ae:ef:e8:a0:26:18:e6:8d:58:3f:62:e6:92:
3c:88:57:a9:a0:0f:21:53:b5:e9:ef:09:a2:93:0d:
b1:52:85:38:1e:9f:70:2a:53:1a:26:f3:c1:18:a1:
94:19:43:2f:a7:56:ab:97:3d:3e:e1:11:f7:12:ee:
a5:b9:98:0a:e1:f1:2b:ee:23:d5:f1:52:70:a1:3c:
c3:d8:89:02:db:09:db:33:bb:7f:6a:ab:24:b6:db:
1e:15:6e:b3:36:e2:27:94:86:24:0f:d5:99:14:d3:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D0:5C:C9:25:08:66:F5:01:BF:40:2A:F3:E4:AB:B0:6B:97:09:D5
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:36:70:4f:35:fd:bd:f2:1b:9b:63:5a:a0:08:df:0d:f6:cf:
20:bc:46:cd:5e:29:b1:85:66:c8:3e:ce:6b:85:39:78:be:16:
4a:b9:3f:12:b2:28:5f:9a:f0:97:cf:a2:2e:b8:c0:02:df:55:
bd:40:2b:0d:99:38:a4:68:56:e0:e1:d2:d8:40:c8:b6:d1:86:
b6:49:60:91:aa:12:3d:ef:ac:4a:65:95:ec:3c:96:1c:e1:e1:
13:1c:10:60:ad:68:f2:25:33:f6:a6:0a:94:2e:71:9f:3e:5b:
c8:57:a6:f7:45:49:ef:14:d1:e5:61:e6:05:08:b9:36:d6:df:
b7:8f:5a:c8:d8:94:b6:71:df:08:0e:bc:d5:98:16:b4:05:e2:
72:dd:4b:4d:66:a6:58:db:ae:7c:35:e8:d4:07:39:6b:2a:f1:
03:ee:37:c6:d9:2e:ea:29:fb:95:43:93:af:54:87:b3:0a:35:
45:53:65:93:0f:4d:12:0a:59:d1:72:85:ba:d9:1d:6f:7f:16:
37:5b:90:ce:6d:8d:f5:3a:90:05:db:e3:5c:ad:74:c6:b7:c3:
65:a0:71:5e:f1:76:cf:50:37:f2:0f:21:27:2b:2a:87:29:b4:
69:98:87:b3:bd:24:4f:88:d5:4b:96:d4:25:4f:9a:02:b0:0b:
e7:b1:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:12 2025 by rpki-client