Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File: jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier: a/7oNEy+fev+zMXsaK2XvGlVdtxyXjRzLjX0AaO34sc=
Subject key identifier: 2E:CD:72:00:E6:DD:18:D6:F8:C1:06:A0:EC:14:96:28:4B:28:6C:AD
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer: /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial: 0198D5158EA674CA84293B689B33C586F809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: h+0F2OHE/DF+KfppnYYz5BroO9k9D55VCvUkm5UC3lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8e:a6:74:ca:84:29:3b:68:9b:33:c5:86:f8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=2ecd7200e6dd18d6f8c106a0ec1496284b286cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:a8:8c:a5:2d:cb:ee:9f:45:2c:2b:c2:e2:
9f:17:72:b1:7f:24:07:9f:15:2c:dc:9f:de:86:f3:
70:81:52:24:94:ea:c5:1c:2a:12:f0:06:c7:68:f2:
8d:2a:ec:ef:57:bd:36:44:76:5e:36:3f:b4:41:fa:
79:5a:21:4c:2f:a5:6c:7c:d7:da:fd:a8:3c:ac:70:
ca:17:48:9a:30:ae:3c:e9:10:c3:36:22:b9:12:d4:
34:6b:49:7c:8a:a6:1e:bc:71:ae:d5:19:1e:ec:ab:
af:ae:28:3d:ef:04:83:0d:bf:74:1f:21:c4:f1:e1:
3f:a4:bb:74:4a:2c:39:65:1b:0b:4e:b9:66:53:77:
ee:c4:6a:59:9d:bc:29:16:67:4d:3f:bd:15:3b:f6:
c5:f0:67:3a:ba:7a:96:d8:9a:bd:d6:7e:db:dd:e5:
fa:0a:ef:83:15:cb:40:a3:16:f1:90:83:d9:18:ba:
d4:f8:62:de:92:b8:36:8e:0f:52:38:73:ea:5b:3e:
5e:ef:12:44:92:64:9c:ad:89:50:a0:6b:a5:ab:c3:
d0:ea:a6:a5:c2:46:0a:4e:42:06:ba:68:3b:80:16:
86:7c:4f:24:c0:a3:4d:52:98:9f:f9:03:79:38:08:
46:7a:94:51:81:c1:1b:34:ff:ee:1c:76:ef:42:de:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:72:00:E6:DD:18:D6:F8:C1:06:A0:EC:14:96:28:4B:28:6C:AD
X509v3 Authority Key Identifier:
keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:33:97:7b:32:a7:6d:37:37:c5:da:a8:8f:3c:56:3f:19:56:
f9:b2:75:40:63:07:09:9e:bd:42:7d:42:99:e2:b7:fe:e4:79:
da:e0:2e:5d:29:86:39:75:29:c0:86:d0:8a:d3:66:bd:fe:3d:
b2:53:ae:fb:f2:a0:b2:b7:e9:73:89:bd:4b:71:3b:87:32:36:
fd:35:ba:c5:0b:04:9b:16:02:e3:6d:62:44:af:3b:34:b6:cc:
95:6d:f0:25:7e:3b:6e:15:32:a2:ef:5c:41:92:ba:d0:7f:f6:
eb:91:a6:79:c0:5e:4f:5a:ae:8b:e6:32:c7:1f:78:4e:7d:6c:
de:53:13:1c:8f:22:df:dd:ea:12:42:57:f0:50:49:81:9b:eb:
32:13:30:ce:ec:f7:61:28:93:d2:a4:68:6a:b5:c5:f6:fb:f1:
e6:c2:6c:98:a0:08:f4:47:4a:3d:6a:60:ce:f5:60:15:29:a3:
73:15:8d:9c:a6:57:9c:a1:d4:23:6b:16:62:54:cb:9b:b5:a7:
6d:75:32:88:82:df:0a:be:7c:9f:86:a8:42:2d:64:5a:80:ba:
04:cb:03:b9:d7:ae:03:c9:2e:83:da:30:31:e0:63:c6:ab:13:
d5:eb:aa:77:bc:8a:c3:0c:5c:87:48:06:7a:a5:da:e4:9d:60:
6c:c2:7f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:20 2025 by rpki-client