Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier: IsCBxCghERMAM8OotQsINSi7h74myFchFHY4SWq/GwU=
Subject key identifier: 17:B1:B1:E2:E4:4E:53:E4:AD:9F:61:B8:49:09:C3:EE:5F:64:30:F8
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial: 0198D65F176851485B8E8FD6AB980347A268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: /R6J7+0gOvwdldbGQ1HBHjwFVBxzhqMZdU1sjbQed6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:17:68:51:48:5b:8e:8f:d6:ab:98:03:47:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=17b1b1e2e44e53e4ad9f61b84909c3ee5f6430f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:72:d0:fb:9c:e2:43:8d:cf:ad:5d:07:17:
47:fc:9c:b4:d6:f5:33:4a:eb:60:e0:39:28:7b:23:
15:d5:cf:fe:63:83:6c:9d:4b:18:15:81:f3:4a:3c:
27:03:f2:5a:15:c8:a1:1a:0a:1c:d8:00:8e:3a:5f:
1d:9c:5f:1e:0f:87:52:b6:42:7d:e6:99:cf:08:ca:
53:69:a3:c1:30:ae:da:bd:87:db:3f:2d:02:e2:e3:
73:2f:82:b5:a0:77:55:18:8f:80:16:b5:1b:7f:83:
c2:68:3e:49:90:b5:97:75:0f:3e:2e:53:56:94:2b:
d6:2e:ed:e6:77:ef:8c:6d:39:ac:0a:2b:0f:4f:27:
32:74:f6:be:db:9e:8b:b0:69:3d:77:ab:f6:48:c2:
65:c3:db:9c:5c:64:e3:ce:62:3e:37:36:4c:dd:b4:
e5:ee:2e:d0:c9:62:b3:34:4e:8f:a9:7e:0d:f7:20:
7a:a7:e3:f0:54:2e:a7:39:0c:8f:6f:de:29:e2:5e:
1a:75:7c:9c:f4:3b:65:a0:e9:07:9d:11:ce:c0:f8:
06:1a:91:cb:d3:3f:f2:a0:d5:6b:5a:54:05:52:a4:
87:30:0d:90:78:e8:e5:b2:fa:76:42:38:51:0a:90:
21:64:fd:62:76:c7:e6:bc:e6:cb:49:23:10:7f:58:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:B1:E2:E4:4E:53:E4:AD:9F:61:B8:49:09:C3:EE:5F:64:30:F8
X509v3 Authority Key Identifier:
keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:18:5e:38:6b:c8:2f:09:ae:37:04:e6:05:55:41:41:0c:
0e:6f:b4:dc:d1:4d:61:fa:da:cc:0e:79:eb:73:3b:c8:7d:de:
60:6c:13:16:a6:a3:70:e7:28:bb:f9:6f:bd:f0:66:82:8d:f5:
71:bb:b9:9b:d4:f6:26:bb:7e:5d:3d:2f:62:92:18:5f:35:5a:
33:f4:dd:6e:42:85:f4:e0:b6:c0:96:4c:40:d2:9a:9b:37:09:
92:da:9b:8f:13:6b:3f:d3:26:d9:2c:68:c3:7f:c6:43:a4:52:
ec:c0:28:fc:78:b0:d5:b9:42:50:fd:5e:2d:26:30:02:29:fd:
11:6e:d7:c2:98:bd:26:92:64:7e:ff:09:56:bb:5a:2f:b1:83:
0b:5a:98:d4:4c:08:4f:78:07:7e:e9:4e:30:ff:ff:0d:22:f7:
27:ec:b9:18:fb:7c:d5:68:81:28:73:39:56:21:aa:c6:bb:29:
d4:31:8b:3e:2c:9f:2c:96:b9:ab:e1:ac:5d:0c:ab:63:df:b4:
1d:cc:30:86:78:59:69:a0:60:33:ff:51:12:ad:19:6d:b4:b5:
14:49:d2:54:bb:b0:85:df:7e:38:45:97:44:a0:40:e5:aa:24:
92:45:84:64:0b:b3:d8:d1:f3:e2:3a:8c:d1:e6:8e:41:57:ee:
67:8f:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:06 2025 by rpki-client