
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: X+TaYUEqF3nV9JUl6Exw7mOV8aybJHvvryu5h+YvSXE=
Subject key identifier: 9F:9C:86:EB:C7:E9:6D:55:0A:60:34:3B:13:7D:2F:4B:97:19:AA:76
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 0198D5BBE5D09B3DBA6DEFC939438E6A65AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0A9C
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: E6E++5RWTukzsqi7YwaCgnFY/cgmiSJX51m9e3XjeN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e5:d0:9b:3d:ba:6d:ef:c9:39:43:8e:6a:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=9f9c86ebc7e96d550a60343b137d2f4b9719aa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3d:67:39:3f:93:92:b2:f9:4b:43:ad:ac:37:
88:02:05:d3:00:9c:ee:b8:99:66:5b:1a:9d:ac:44:
ad:ed:ed:26:e9:5c:b4:70:7d:eb:72:0d:63:82:1d:
09:dc:4c:4d:d4:f5:93:b7:14:01:92:09:76:7e:6d:
85:cd:a1:9b:a4:78:a5:fd:06:c3:7f:bf:ea:c7:9c:
d5:2a:59:da:45:22:28:6c:57:55:dc:50:21:a9:26:
73:84:4f:2f:1f:a5:15:1b:fd:ee:17:a8:50:36:fb:
e9:e9:37:4c:28:f9:a5:f1:ea:6b:8a:13:82:64:58:
22:c6:cf:2d:76:61:b5:27:10:f3:95:67:42:86:06:
2e:b0:61:0f:c0:b3:2e:d1:7f:03:38:c4:0c:c5:fa:
0a:d8:5c:9b:92:81:8d:22:ef:91:89:65:2c:e3:73:
77:d7:b8:8d:cd:ec:17:2d:2c:fb:d3:97:de:99:c8:
85:d2:01:92:c9:fa:38:dd:6a:c3:14:18:2d:58:a0:
ab:be:58:90:bc:88:ec:be:e2:66:26:6c:ee:62:d5:
39:92:94:3f:e0:a8:2e:47:05:ed:53:52:8e:0a:50:
12:87:98:a1:b5:df:62:b1:73:05:2b:9f:f2:16:96:
9a:cd:cf:f3:6b:27:bd:4b:b6:46:46:29:71:d8:ee:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:86:EB:C7:E9:6D:55:0A:60:34:3B:13:7D:2F:4B:97:19:AA:76
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:43:15:19:75:c8:15:22:89:63:36:00:d5:c3:43:0a:75:
84:86:45:13:d3:56:14:d0:a1:3e:c4:81:39:a0:09:5f:85:d8:
75:59:9c:06:17:31:aa:b3:bd:3b:3a:f9:f7:85:c4:d0:57:06:
04:2c:4b:2e:7c:7b:52:58:df:e8:44:f7:98:9b:8a:d0:56:d5:
49:7b:c4:0f:3b:3e:85:bd:96:95:55:84:0d:58:2d:10:45:c2:
69:d3:f2:5f:e0:45:5b:c2:e7:06:54:a7:3d:93:47:34:e7:54:
74:f5:2a:77:8a:36:65:49:0f:24:00:24:b5:bb:f6:d6:e0:80:
4d:62:96:c1:a5:52:36:0e:40:e3:e0:a2:2b:f2:fe:14:a3:5c:
50:7a:3b:4c:14:a1:8c:75:eb:ac:d7:27:b7:ae:41:44:82:47:
6c:5d:3e:e4:97:21:4b:0a:ee:b1:0d:e2:68:68:9b:fa:54:c0:
5c:0f:00:01:c9:1d:5a:78:68:37:71:00:6a:9a:2a:cf:8e:8e:
a6:57:0f:9e:af:7d:e2:78:4c:bb:44:30:b8:88:fa:3f:63:41:
58:d5:60:3d:8a:1e:40:9d:b5:ae:4d:0c:ae:e7:a9:bf:b6:85:
a3:ce:e1:bb:ba:74:13:8c:1a:7d:e7:25:81:4f:57:ff:75:04:
02:38:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:32 2025 by rpki-client