Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File: j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier: VUSnxguzKqjmgxek8eXIEOV+5pY4Ahkzrv4b2Hx8i/w=
Subject key identifier: 9F:A6:0D:DA:A0:95:6D:9C:53:5C:B8:9C:64:D3:AE:C0:B6:06:D3:F4
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer: /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial: 0198D473F59D0AA952C637E68038BD8EEE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number: 0FAF
Signing time: Sat 23 Aug 2025 01:03:45 +0000
Manifest this update: Sat 23 Aug 2025 01:03:45 +0000
Manifest next update: Sun 24 Aug 2025 01:03:45 +0000
Files and hashes: 1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: KKU8VzfbvX6cpZTIGV0xS/2+2twa0AnySgx1PW3mPNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f5:9d:0a:a9:52:c6:37:e6:80:38:bd:8e:ee:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Validity
Not Before: Aug 23 01:03:45 2025 GMT
Not After : Aug 24 01:03:45 2025 GMT
Subject: CN=9fa60ddaa0956d9c535cb89c64d3aec0b606d3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:14:9a:67:ed:a9:9a:31:8a:bc:c9:43:60:
58:1b:f8:f3:b2:45:1c:cb:61:df:e2:d9:8f:ff:c6:
a9:8d:09:0d:99:ec:45:8e:33:22:32:3a:94:a6:5b:
5c:dd:78:28:f1:6c:c9:0f:69:80:1e:f3:a7:94:f3:
7a:5c:6d:65:b4:fb:4e:a2:97:78:72:a7:7c:df:38:
f1:87:de:ec:41:0b:64:ea:60:12:bc:98:4f:05:3c:
1a:64:d0:42:a4:98:48:08:34:63:9b:ae:80:30:7c:
1e:59:fa:e9:a5:16:cb:f3:86:d5:d5:0c:10:79:d7:
7c:d2:97:d1:34:69:6e:a2:5f:a0:80:25:34:9a:65:
12:8f:06:95:3b:32:f4:6b:c0:34:9e:a2:4c:6d:70:
0a:10:39:8a:98:56:ab:35:c0:40:4c:df:49:ef:ee:
ae:56:99:4a:33:e7:b5:e4:cb:9c:22:95:71:3d:59:
b4:fa:91:01:56:72:b4:a4:43:21:81:60:0c:14:9e:
61:8d:fa:a9:d6:9c:f8:1e:38:3a:48:08:37:be:6d:
a9:cf:45:87:dc:8b:94:a9:6d:a7:a6:5e:81:94:da:
54:62:10:5c:58:78:0a:ab:69:6d:24:dc:53:f0:55:
6d:95:1a:e3:e6:44:1a:c5:03:a8:fc:44:81:90:54:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:0D:DA:A0:95:6D:9C:53:5C:B8:9C:64:D3:AE:C0:B6:06:D3:F4
X509v3 Authority Key Identifier:
keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:af:51:eb:a3:04:27:1c:67:bb:58:69:3e:42:be:8b:e7:41:
9c:3d:ed:e3:9b:71:67:fc:33:fc:99:6b:62:a1:95:4d:0a:c8:
11:f6:21:63:b8:8e:9f:b0:eb:da:90:b7:b8:5e:7b:d7:a8:96:
b9:1b:fa:ae:1d:1a:4a:60:d6:5e:df:f3:14:20:d7:d8:f4:5d:
e7:73:27:86:05:13:b2:2f:53:07:03:6c:0f:03:6f:76:b3:7f:
d6:b9:eb:00:1f:06:45:76:2c:30:58:3b:2b:e9:ab:7d:8a:0f:
e7:b4:ea:15:61:4e:f1:89:6f:8b:6f:df:da:ca:2e:db:e2:c4:
72:6f:2d:51:6b:69:f0:3a:e8:f6:60:af:4e:9f:ea:14:9e:fc:
ad:fd:c4:33:84:98:15:36:6e:40:d4:9c:3d:da:10:b2:35:ea:
8b:12:a0:57:3f:5c:90:32:90:bc:1b:47:ad:cd:e5:fa:a3:21:
52:d7:be:45:a9:b0:00:8e:df:39:14:b1:03:dd:c3:0a:e2:5b:
dc:07:df:ff:c8:e6:0f:c1:59:5f:71:00:d9:a9:9a:e3:7b:1b:
67:e5:53:35:0e:fa:2a:40:cf:e0:21:40:71:fd:5d:5e:51:10:
57:ec:c1:f2:a7:ad:e2:64:de:c7:37:e4:5f:83:67:44:98:5c:
e3:58:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:12 2025 by rpki-client