Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: 2FosjwOQQ0HwH5Ln9v41JVMzqhMRgRLQRrck1zGwbjc=
Subject key identifier: 1A:96:5A:CB:C2:6E:1B:D5:E5:41:0C:FD:5F:60:E4:2E:E5:73:11:1A
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 0197BA7DC1683C4582102B32EB0E54D6F685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0803
Signing time: Sun 29 Jun 2025 07:01:33 +0000
Manifest this update: Sun 29 Jun 2025 07:01:33 +0000
Manifest next update: Mon 30 Jun 2025 07:01:33 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: yfA8udupQ/Na2GYYbWQJJ2+0ipqN+atQJXNLyDdcxtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:c1:68:3c:45:82:10:2b:32:eb:0e:54:d6:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Jun 29 07:01:33 2025 GMT
Not After : Jun 30 07:01:33 2025 GMT
Subject: CN=1a965acbc26e1bd5e5410cfd5f60e42ee573111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:df:6a:b3:7f:4e:b5:b9:de:68:29:99:ae:
90:f0:f9:19:65:fd:19:ab:22:ca:48:3c:81:fc:5c:
65:73:c9:bd:ad:2a:ca:22:38:d8:9c:ac:e3:36:8b:
09:07:db:ae:1c:10:21:3b:65:58:60:c1:e6:d1:03:
99:6b:51:7c:fb:18:29:6e:d4:10:91:8f:55:f1:a9:
78:8b:1d:9c:a2:fa:a8:d8:b0:75:0d:1f:4a:83:19:
ff:f6:95:56:4e:b2:9e:38:dc:21:21:89:75:13:bb:
08:7e:61:26:a3:19:ef:72:77:75:dd:de:a5:d3:23:
80:ee:3c:38:f4:be:96:4e:f2:07:9d:d8:89:5b:60:
ef:be:74:e0:e1:e9:76:e7:3d:77:d8:1d:51:a9:b5:
fc:07:83:e7:de:a1:99:e6:e1:e0:14:39:e7:33:0c:
af:f4:c0:6b:ed:87:f0:f2:05:15:a2:bb:3a:9b:f1:
12:b5:45:92:2d:8d:6d:a3:29:96:af:b2:ee:cc:9c:
71:fc:5a:3a:86:1d:81:b8:f4:7c:7c:b3:87:4f:bf:
22:c3:09:73:e3:61:6e:9e:c6:52:b2:c2:eb:72:45:
41:65:6b:9a:46:9c:ae:cf:6b:64:8e:e7:be:21:bb:
8d:62:ed:d4:9d:d8:0f:bb:a6:0e:c3:cb:fb:f4:72:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:5A:CB:C2:6E:1B:D5:E5:41:0C:FD:5F:60:E4:2E:E5:73:11:1A
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f1:20:f9:19:94:76:39:74:65:49:f1:0d:ec:92:af:4f:e1:
95:36:c7:b1:4b:83:25:63:00:51:42:63:6f:be:f0:cc:98:b7:
db:e8:d2:c8:8a:01:d8:9a:8c:7a:e7:df:fb:21:e7:25:74:ae:
74:bc:a7:1a:c6:22:d7:99:c0:f7:93:5c:ae:41:31:e7:a6:02:
25:f2:96:be:93:e5:50:2a:7a:df:2a:cd:a5:0c:e1:24:62:f7:
0a:22:d4:d4:5c:a8:74:63:97:03:8e:f8:7a:e8:98:1d:80:23:
64:79:5d:f0:22:aa:06:38:d7:f8:47:ad:32:17:fd:aa:b7:64:
cb:9f:81:ba:3c:cc:70:b5:35:68:35:82:34:1c:71:8b:00:43:
58:83:b1:b0:3d:13:f0:90:f8:5f:aa:80:3e:61:f1:6d:30:e1:
d5:77:04:1d:22:5b:e7:af:27:23:c5:ea:36:da:7a:fa:ac:5a:
b0:98:ab:44:de:b8:7e:a7:8f:2c:88:b8:91:d2:c7:3f:74:9b:
a3:04:5a:2d:37:b4:5a:7e:e8:9b:e6:da:d4:39:28:fd:d3:48:
8a:1c:06:86:c9:e0:85:4b:3d:11:11:18:1f:57:a9:1f:47:44:
74:01:c2:3d:b1:00:19:a4:36:a3:7b:6f:d6:e3:49:48:79:42:
23:bc:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:09:22 2025 by rpki-client