Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier: ZG33gGu0gDAbVPg9OcyA5J03gzcKRV0qNMyofF6yeI8=
Subject key identifier: 16:AA:7F:72:27:D6:B3:90:E9:89:3A:78:E3:B3:A9:B6:E4:F7:2D:8B
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial: 0198D583459CF9F76ECFD95D193B57D5BF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number: 0F7A
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: tpHP1RNAqpP3KkoGu0LUt6GfH5Tlu3z4DUye0nnER5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:45:9c:f9:f7:6e:cf:d9:5d:19:3b:57:d5:bf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=16aa7f7227d6b390e9893a78e3b3a9b6e4f72d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:b8:20:f3:03:d5:a6:b5:05:28:c5:9e:3b:
1f:02:f4:8d:81:6e:4e:cb:0f:e1:49:58:53:74:83:
69:08:b3:05:24:73:4f:1b:16:a3:db:1e:88:bb:07:
8f:f4:5f:27:73:cd:15:a0:3a:36:19:fe:71:fb:21:
70:70:40:6f:c6:ee:e8:6d:54:2f:1e:df:90:a7:6e:
60:28:bf:62:e5:49:86:4b:b5:24:d8:04:f4:1c:1d:
87:a5:83:10:f5:4a:aa:f2:fc:ce:00:d0:3e:6c:08:
8e:02:8a:9f:e5:eb:b9:5a:0c:4e:e6:2d:65:bb:cd:
2f:1b:98:46:db:4d:34:15:3e:41:db:9f:8c:b2:50:
69:c5:8d:73:73:2a:f4:a7:6a:e6:ef:2f:9e:fb:51:
8e:22:b5:b8:58:6c:f7:97:6b:00:0c:68:4b:3f:a7:
aa:9e:3c:8c:da:bf:23:ce:51:92:4d:4a:e2:56:6e:
40:94:f3:fc:61:0c:d1:cc:f7:b9:71:d7:d1:93:d2:
7a:b6:75:52:e0:c5:bb:07:85:49:b1:65:6c:a6:2c:
3a:9f:dc:a9:6a:15:75:d8:b9:21:a8:b4:56:fc:f2:
b5:02:e9:59:36:a4:7a:24:2e:3a:72:4e:f6:7e:9e:
ea:dc:33:f7:c2:ba:01:75:40:b1:5f:57:06:20:e4:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:7F:72:27:D6:B3:90:E9:89:3A:78:E3:B3:A9:B6:E4:F7:2D:8B
X509v3 Authority Key Identifier:
keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e7:81:7a:3f:e6:7d:fa:f5:c1:dd:7f:96:d3:5e:b8:79:17:
89:9f:56:a1:4b:ea:11:51:09:48:08:8d:91:0c:85:af:94:a3:
41:bf:d3:2d:f9:f3:b3:b3:4b:d7:a3:86:a2:26:20:46:2c:51:
00:23:32:6b:d8:33:88:84:c8:3d:93:0c:3e:8c:82:5b:fb:e3:
cd:27:6e:c2:d3:da:79:ef:ef:9b:f3:b4:a2:75:04:68:81:f4:
44:0a:11:e9:d9:b8:e5:f8:b9:03:c8:13:2b:ac:68:c0:de:57:
1a:b3:d4:e8:f8:c2:9e:d4:29:e0:85:8b:a5:74:da:6d:77:17:
ed:90:ff:3b:70:1c:e6:ff:06:69:20:d0:bd:5f:6a:e8:1d:a2:
a2:d6:4a:3d:dc:82:d6:a0:c2:dc:5b:7d:23:1d:7f:be:41:2c:
3a:af:24:27:75:99:6d:71:04:2e:68:1c:70:c3:5e:b4:5e:e2:
29:75:48:1f:ae:8a:d3:43:8c:b2:e8:79:51:91:98:94:fc:96:
16:14:1f:32:a1:1b:ba:dd:a9:cb:d2:08:ca:b9:1b:a3:d5:06:
95:51:03:d5:0d:d2:ff:f8:aa:3b:bb:a4:69:4b:8e:0f:3c:98:
11:5c:6d:c3:54:2b:2d:8d:80:d9:be:91:22:9d:9d:cc:19:e2:
89:4c:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:36 2025 by rpki-client