Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: jGC+yaYl/y/lYXtncCQcwcGhyJ54qpkRc9rbsQjMfms=
Subject key identifier: A0:38:95:FD:2E:71:C3:14:24:86:BB:9D:8F:51:1C:E5:08:F7:99:D6
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 0198D472BD8C092A30F70E29427C8D682B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0895
Signing time: Sat 23 Aug 2025 01:02:26 +0000
Manifest this update: Sat 23 Aug 2025 01:02:26 +0000
Manifest next update: Sun 24 Aug 2025 01:02:26 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: +A63pgB1Pi5zgZ0znAki8Y0r9wLE74AaJrXZJPdmHXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bd:8c:09:2a:30:f7:0e:29:42:7c:8d:68:2b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Aug 23 01:02:26 2025 GMT
Not After : Aug 24 01:02:26 2025 GMT
Subject: CN=a03895fd2e71c3142486bb9d8f511ce508f799d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:b1:0f:4b:18:7e:c0:92:9f:81:0b:c0:84:
9d:3c:b8:81:8c:73:5a:48:0b:c6:e4:68:00:55:c4:
af:2c:95:f5:86:4c:82:04:37:7a:c4:0c:60:8c:bc:
58:50:c5:5b:77:18:58:c8:eb:36:3a:35:ee:61:da:
51:f3:9b:c7:da:a5:9a:21:a2:d9:68:77:de:4b:ba:
7c:e8:48:ca:d5:38:25:2a:9e:3d:9a:98:56:f5:2f:
6b:b2:f9:7d:07:21:75:29:57:07:0f:7a:85:ee:00:
b9:27:67:0e:6c:53:06:c5:66:4d:26:f8:95:2d:1e:
75:a7:9e:c1:38:72:94:31:26:3a:49:cc:bc:79:a2:
8c:05:2b:3b:0c:c5:2e:a1:8c:9e:8f:d0:79:08:9e:
70:f5:15:56:ab:e5:05:78:b5:f5:71:2f:dd:79:3d:
20:c0:2d:89:46:52:be:6a:51:6b:c2:ee:0c:fc:3e:
ad:87:56:5f:95:c1:27:51:3a:a2:62:ec:58:1d:7b:
26:16:f3:1a:d6:52:ca:94:b9:7e:63:4c:46:23:60:
20:69:db:e5:fc:ce:ca:42:0c:65:f3:61:61:af:21:
72:15:64:bf:75:28:b3:62:e9:7a:ec:77:84:29:ab:
45:25:9a:ca:65:25:56:ec:2b:2a:3d:e8:9b:65:3e:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:38:95:FD:2E:71:C3:14:24:86:BB:9D:8F:51:1C:E5:08:F7:99:D6
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:e2:82:05:96:a4:e9:d5:22:b1:f1:e2:46:dd:14:f4:13:81:
a1:4b:ef:67:2e:b3:5f:2b:d3:08:da:eb:ae:29:d9:4e:9e:05:
11:92:9d:8f:64:9c:c7:e2:76:8b:cb:36:5e:4e:44:71:39:be:
da:9b:8a:22:5a:33:31:96:3e:90:f4:c8:88:77:c1:df:6d:be:
21:7e:b7:9c:31:e0:0a:2c:29:fa:59:20:14:74:d1:7b:65:ec:
3f:21:eb:d8:22:d6:32:f6:0e:d1:67:9e:a4:73:56:05:cb:b5:
35:58:7e:b4:6a:ea:71:ca:ec:9c:d7:bd:aa:0a:55:6f:95:54:
31:68:d0:35:a7:d1:cd:16:b3:f6:53:85:af:49:f0:42:c4:e8:
c0:c7:96:bb:7f:37:46:7e:0c:a9:15:fa:f8:81:bd:16:d4:ce:
9e:44:4f:20:17:1f:d3:c1:2e:f2:5c:eb:51:2c:56:dc:98:49:
14:7a:da:0c:73:03:5d:a0:f6:f2:2f:67:92:0b:11:81:cf:0a:
b9:36:75:23:ed:04:f2:df:67:f3:72:44:c7:ed:4a:1d:d2:95:
cf:f9:bd:eb:c8:5a:f7:38:94:00:c6:5c:70:a6:e1:d4:7a:8e:
d7:57:e1:3b:5b:fa:58:08:13:bf:04:26:fd:d1:47:c7:6c:69:
e3:fe:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:54 2025 by rpki-client