Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: duM0snlVAJw5S85Xqynpc2NIwvkw6ORIcadZl731ASo=
Subject key identifier: 23:02:B3:21:8D:12:81:1D:AA:04:F0:F4:DA:BC:2C:CA:84:17:1A:FF
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 0198D7057B9E8CC034CB9F6BF2C86C48EA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 0E9D
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: Kl2CE+P6I5MOaZYj2w6jgwDXQBKzqlpQvFOvASm0jY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7b:9e:8c:c0:34:cb:9f:6b:f2:c8:6c:48:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=2302b3218d12811daa04f0f4dabc2cca84171aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:dd:2a:89:79:a8:a4:dd:6a:7b:45:18:8e:
a5:20:0c:e9:00:9c:8d:2e:9c:25:a2:12:c7:c4:2b:
af:25:4d:b5:3f:a4:b2:81:4f:e6:70:37:cc:0a:cc:
2b:4c:2e:ab:67:c8:b4:f1:31:7a:0e:10:ac:72:75:
f2:59:4a:0e:7c:c6:48:54:58:d3:88:12:47:5f:86:
05:f9:24:d5:b1:46:8a:d4:b0:3e:ec:79:ac:37:8d:
b9:2b:6d:28:66:8f:14:c6:7f:40:1c:e6:5d:ac:c7:
c0:04:b3:8e:85:9b:17:77:5d:7c:44:64:09:71:29:
d2:99:3f:20:50:7f:90:66:7d:fd:a8:02:cd:e0:a1:
df:14:ad:b5:40:86:15:80:da:da:1e:00:21:10:47:
e2:6b:c2:b5:01:7b:c2:ba:66:53:4d:10:c7:64:f1:
7f:fa:39:ba:ee:1a:57:6b:0b:f4:84:8e:fe:f8:7d:
24:4d:98:a4:f3:76:bf:64:90:c7:43:54:33:c0:fd:
82:bf:70:3e:e7:5f:80:e4:8d:73:81:e2:9a:72:ad:
d2:66:14:91:df:1e:98:25:f8:c2:1f:18:84:0e:8e:
b1:c0:22:a5:12:62:22:c5:0a:89:b2:73:c5:d8:a8:
e0:01:e6:04:35:cc:f5:1c:c8:26:6f:62:5a:a3:fe:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:B3:21:8D:12:81:1D:AA:04:F0:F4:DA:BC:2C:CA:84:17:1A:FF
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:de:7e:50:bb:37:a1:62:5a:48:15:b1:ed:4a:75:97:92:91:
7c:e6:2d:40:09:93:b8:b4:5c:86:b2:e8:1f:c1:3c:92:24:4c:
b6:94:33:76:19:28:bd:fa:a0:a0:9a:53:3d:99:b1:01:d9:70:
86:6c:2d:35:f8:dd:c5:50:d5:93:71:34:e3:2e:3d:4b:5b:c4:
22:fa:ff:20:df:86:dc:5a:07:9d:af:a6:f0:25:21:8e:3f:fc:
f7:4d:b4:73:f6:65:99:39:78:04:e2:20:9c:0a:5f:c8:b2:c0:
dc:e1:51:56:7e:33:8b:7f:e6:b4:87:4b:2f:ed:90:0b:4c:5c:
3a:fb:43:57:35:7a:20:b4:2e:a4:98:18:09:48:0c:21:57:1a:
bd:55:43:42:09:37:1f:71:de:69:76:8b:f7:5d:80:ed:54:eb:
c4:4f:5a:ed:5b:39:f3:8a:17:c1:13:95:9b:4b:38:45:e6:e0:
98:8d:a5:bd:99:b0:ea:93:61:9a:3d:ce:3d:57:a1:e1:37:74:
d1:33:32:90:40:dd:76:84:9a:d6:3f:78:72:44:7f:43:6f:e9:
dd:0b:07:c9:43:4a:4f:3d:0a:3d:c2:7c:0e:c4:73:da:76:99:
f6:34:8e:b1:39:ad:87:98:e6:09:a1:8f:1f:6f:b6:1b:fe:60:
54:b1:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:00 2025 by rpki-client