Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json)
Hash identifier: kNbysDW12Uz75w3r1O9nUZfQEbXJykFckJKOY35JcCk=
Subject key identifier: FB:B1:1C:37:25:41:86:1A:A7:98:42:4A:BB:09:47:AA:52:8D:A4:CE
Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Certificate serial: 0198D4E03904C2AA46740C5C2223BA2BDA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
Manifest number: 0979
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: 7nd9e1+6oe4XOgoaAzuipbLgxZ+8BhVbteUeBZrCvEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:39:04:c2:aa:46:74:0c:5c:22:23:ba:2b:da:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=fbb11c372541861aa798424abb0947aa528da4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:46:89:f0:88:1b:d8:b0:cb:fb:eb:6d:f0:
85:d5:9f:2e:33:3d:59:a4:d2:73:ec:1d:01:35:03:
a1:80:00:3a:90:e7:ce:56:e3:c9:d6:91:f7:da:70:
97:29:17:8c:e7:55:3d:c4:8d:bf:01:b2:da:3f:91:
1d:2f:57:6b:01:4c:6d:d2:86:10:fd:37:81:46:c8:
5a:d8:40:22:93:da:55:44:04:5f:cb:28:22:f8:6d:
a1:59:0a:3b:6c:81:84:01:ee:3d:3a:91:bd:fa:31:
84:16:de:f4:b2:87:c3:e0:ba:2e:d2:0f:5c:70:9f:
15:80:cd:ec:93:c8:e4:6d:0a:c6:be:57:4d:87:a6:
78:c9:70:b5:77:8f:89:fe:e4:da:f2:29:01:6f:74:
1b:9a:61:d3:96:2b:a9:57:bf:2d:e1:14:e0:0e:de:
6d:ae:b4:80:ae:f2:5e:dd:03:e0:d9:3d:79:df:37:
6e:e7:cf:de:70:e3:f1:42:00:e5:ab:ad:7d:cc:b6:
a9:4e:21:be:56:df:05:3c:13:6a:17:f0:a0:7d:88:
f3:e4:e1:fe:c4:64:d5:c3:b3:e1:2e:9f:1a:57:c4:
59:0f:18:33:46:14:85:78:59:18:d1:b8:d7:e3:d1:
b4:86:26:c6:e4:48:2b:c7:5d:9d:79:d1:0a:ec:f8:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:1C:37:25:41:86:1A:A7:98:42:4A:BB:09:47:AA:52:8D:A4:CE
X509v3 Authority Key Identifier:
keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:2d:73:69:10:93:60:8a:40:d2:ef:34:df:4d:d8:58:f5:
8a:50:f7:a3:de:b7:b9:4b:28:87:6d:8d:7a:8d:ad:a2:a3:c2:
f4:7d:c5:36:a3:04:71:42:e3:a7:dd:21:f6:bd:ab:f5:74:c3:
af:0d:93:1c:a4:15:be:82:c5:92:d9:72:4f:98:c3:a2:7f:b5:
51:af:0a:f9:55:82:d3:2d:05:39:93:1b:c4:9e:69:7e:f9:50:
5e:0b:99:4e:97:c6:a3:6d:12:52:04:ba:c4:61:7b:b8:da:e5:
df:d3:5b:a5:86:15:20:1c:97:4b:bd:94:9a:cb:f4:a7:9a:c1:
85:bc:2a:45:84:b8:90:0e:9f:30:8a:8c:dc:5f:02:5a:5c:fd:
e0:41:b1:e7:26:43:1c:4d:4b:fa:2d:c5:1c:47:25:0a:65:a9:
e8:e9:1a:1b:65:7b:da:47:95:b4:ec:fa:b4:c7:bb:e7:25:b3:
38:43:19:0e:4e:f7:46:5c:bd:97:c2:42:09:44:e6:a5:61:bd:
b4:fb:b5:37:7d:54:f4:36:45:15:11:fc:d7:8e:51:f9:14:65:
5e:fa:04:c8:74:a8:67:4e:9d:87:ee:0f:17:e6:03:18:d7:38:
99:3f:64:91:86:b9:2d:0c:a9:bf:57:78:c6:87:da:97:bd:09:
30:5e:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:17 2025 by rpki-client