Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: +QI5SCNFl6ImzyhQpT3zlUDr1MA7YMjRB9Q39JiMnUs=
Subject key identifier: 0A:6B:89:5A:85:77:E7:AA:35:22:08:B4:DD:E3:8A:DA:91:26:E5:72
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 0198D84FCCDEE0742656DBA8DE9D16F8F643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 0FD7
Signing time: Sat 23 Aug 2025 19:02:45 +0000
Manifest this update: Sat 23 Aug 2025 19:02:45 +0000
Manifest next update: Sun 24 Aug 2025 19:02:45 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: ZphTNV5D0T7HYM1gLqR6PXzSyJDqVU/dXB7sg/T4K48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:cc:de:e0:74:26:56:db:a8:de:9d:16:f8:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Aug 23 19:02:45 2025 GMT
Not After : Aug 24 19:02:45 2025 GMT
Subject: CN=0a6b895a8577e7aa352208b4dde38ada9126e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:94:a8:25:ac:5a:06:21:94:15:e6:34:24:
6e:4b:d7:a5:13:d9:89:27:0e:e4:05:8d:17:16:8e:
5b:22:85:be:df:1d:7b:b3:81:68:aa:df:be:3e:93:
10:ab:dd:ad:37:c8:3a:93:9a:50:93:51:5b:34:3c:
7f:24:12:ae:df:d1:5b:6a:73:23:21:f6:4c:28:dd:
08:e7:d7:10:ba:e8:22:a6:c0:db:a0:d9:36:13:df:
47:a9:93:2b:ce:6b:25:0e:7d:ac:b9:cc:51:8b:14:
8d:95:78:99:b6:c0:fc:b6:db:f8:23:f3:6c:95:87:
73:73:05:e5:02:a3:e8:1d:92:2b:de:dd:6b:7b:33:
4b:96:f5:30:5e:6f:4d:6d:35:cc:91:91:42:61:93:
61:2a:54:6e:f3:3d:b1:1e:84:30:42:64:a4:07:a7:
06:13:06:29:b9:b8:a6:54:d5:be:d3:56:3e:c7:f0:
9c:55:5a:48:48:b6:fc:7f:d8:a5:48:73:88:21:df:
d8:fe:67:f2:95:75:76:aa:65:b8:84:51:cf:52:e6:
b4:8a:1f:2b:de:42:21:0c:37:51:47:a1:77:07:56:
10:63:1a:0d:27:b8:62:fa:ee:cf:ee:ad:d9:4e:0b:
2c:2d:d5:81:98:23:87:bd:b6:1a:a5:cb:eb:82:4c:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:89:5A:85:77:E7:AA:35:22:08:B4:DD:E3:8A:DA:91:26:E5:72
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:f1:38:9c:0c:15:5a:1d:9f:70:ad:67:a1:6f:84:40:c8:
11:fc:bf:bc:ff:45:8e:79:c7:7a:14:dd:c8:26:0f:9e:b5:0b:
44:3b:56:15:99:05:a5:d1:94:de:7b:d5:6a:8a:0c:90:20:99:
88:9b:1f:0f:e3:c6:0c:3b:90:6f:b8:6d:12:0d:be:e6:a5:af:
6d:33:39:07:cf:9a:74:53:ec:6e:86:ed:26:f1:c4:e3:0f:88:
b6:8c:30:d8:67:6e:da:00:f2:59:b2:c7:6d:0c:f8:14:23:da:
7b:06:30:59:d2:cd:6e:b4:61:63:63:2d:06:46:e3:99:26:26:
5c:0d:70:c2:82:f6:d2:15:4e:47:33:44:0a:b2:3c:bc:ab:cd:
bc:13:36:64:6d:02:02:36:a0:54:6e:92:b2:2e:ce:71:e5:9f:
9f:6a:b7:d0:85:61:30:3b:e2:c3:d1:70:68:d9:f2:3e:cc:00:
3c:de:ba:6f:f4:48:64:34:94:32:2c:01:a1:f3:25:48:db:7b:
93:2c:b6:1f:ad:d5:64:48:ad:64:70:4b:e2:12:e2:f1:ce:e7:
78:d3:ac:94:00:33:8e:9b:b4:8e:c5:4e:e3:cd:54:d4:9a:d2:
4c:a6:a7:84:56:a5:54:53:d4:18:ec:26:26:ce:cc:6e:21:9d:
ec:58:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:44 2025 by rpki-client