Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: Ffa/UejhNCcmuKJD7NaZx2kDXmbehR/bBcDJccd0hOg=
Subject key identifier: E3:9D:4F:84:33:D5:C6:66:EF:80:BE:9F:F6:A1:1B:52:DC:35:5A:47
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 0199FFC7270A6EFFC010893EE86F3015F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0930
Signing time: Mon 20 Oct 2025 04:01:05 +0000
Manifest this update: Mon 20 Oct 2025 04:01:05 +0000
Manifest next update: Tue 21 Oct 2025 04:01:05 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: kkICJY36t7bsKN7c1czUtrd70tCF/n3EfNR4hMmHzr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:27:0a:6e:ff:c0:10:89:3e:e8:6f:30:15:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Oct 20 04:01:05 2025 GMT
Not After : Oct 21 04:01:05 2025 GMT
Subject: CN=e39d4f8433d5c666ef80be9ff6a11b52dc355a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:a6:5b:9d:4e:28:46:20:d2:18:5f:98:76:
5a:14:c1:db:25:b5:a5:48:f4:e8:fe:d2:01:e4:52:
a6:6c:3a:3d:fe:34:72:47:c5:53:cc:f2:e4:82:61:
18:d0:8c:3f:a2:89:71:90:21:92:23:c1:02:0d:61:
00:6a:6f:a9:e5:57:62:af:68:4b:ea:26:57:4e:79:
f6:d9:b4:cb:9c:21:36:fd:b2:c0:48:88:3c:a2:15:
a3:d3:03:25:2d:15:69:4c:21:b0:af:56:9b:e5:ce:
ec:3d:ac:c7:13:7f:7b:e8:5c:6e:6d:6b:c1:7b:71:
3b:69:2f:35:6b:65:44:37:45:39:17:53:78:ac:8e:
7b:a6:61:97:a5:0a:8e:7b:f7:b1:57:42:6c:7e:12:
dd:f4:91:9d:dc:c6:22:e5:50:f1:63:bd:6e:89:29:
7f:2b:3c:fd:4c:fc:47:51:82:98:cc:9b:be:4c:db:
af:39:b8:ef:59:3b:a8:27:d7:89:2d:44:2e:9e:31:
d4:50:83:ec:69:c9:3f:51:62:e4:c0:f1:8a:dd:51:
41:75:45:da:fd:2c:9b:cd:98:ed:00:d6:1f:01:0e:
e4:67:66:c4:7e:73:0a:b1:24:10:1b:28:28:d5:fd:
3e:77:d7:5c:8d:da:7d:82:b5:fe:fc:64:63:0c:a1:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:4F:84:33:D5:C6:66:EF:80:BE:9F:F6:A1:1B:52:DC:35:5A:47
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6a:61:a2:e5:a1:b6:a7:fa:42:9b:9c:e6:48:bd:88:e5:7c:
d6:10:4d:ab:58:7d:03:1a:56:86:3e:2d:5f:db:af:a3:f1:58:
f6:73:7c:d2:f7:cf:83:d5:d2:1f:dc:31:78:7f:82:58:56:c1:
ef:c6:c4:44:a0:ea:97:c1:99:0b:db:a3:9d:ee:56:ce:69:bd:
07:48:b4:7f:da:72:cf:32:20:94:77:ec:c3:47:1f:b3:5e:d4:
44:9b:d5:d3:23:37:8a:93:e8:02:0a:d6:b3:2b:0c:8a:ef:6d:
70:50:1c:50:cb:7e:85:ee:58:e2:f7:f4:10:7a:11:2e:d6:23:
92:ba:88:2a:ab:45:60:9e:f9:33:be:6c:b6:2e:28:7e:3e:00:
ae:75:21:fa:c6:c5:be:5c:f2:ba:45:54:9a:ed:64:c3:d9:9e:
f4:f9:6e:d4:6b:bd:6b:41:09:34:80:f2:75:4a:37:26:fa:16:
3f:ad:c3:4a:7f:d4:b2:24:b6:f4:6a:c6:1e:fe:a6:12:33:db:
6f:24:39:25:97:31:ab:f4:96:db:c1:5e:b3:e7:5a:3f:6d:96:
40:97:11:c8:b2:05:d2:14:a4:81:8d:c1:5a:a1:eb:9c:f8:e7:
4e:e2:f2:42:2d:80:b1:a6:8e:be:7c:61:06:78:45:08:85:e3:
68:92:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:25 2025 by rpki-client