Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: HxEkEnNIixMKwgNgJ3mzy3zkDa+OsgP5V/YSdKgg1/4=
Subject key identifier: 9D:34:19:E1:9E:DF:C0:2B:2E:B0:77:B1:81:FC:AC:C2:2B:03:1B:03
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 0198D515BE7D023BBBB69AC7A149DDDC6F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: 6dCN7X79CQD0IPraNyI0w912opFehBzOTU2DjGfwhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:be:7d:02:3b:bb:b6:9a:c7:a1:49:dd:dc:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=9d3419e19edfc02b2eb077b181fcacc22b031b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:ca:2e:e8:81:1e:26:e8:66:e7:df:9a:3b:
31:9e:5e:cf:4d:4f:84:74:38:9a:22:5c:c1:18:73:
e9:c5:70:66:9c:ad:19:a8:6d:d1:77:f8:f5:bc:eb:
d4:ca:12:ad:34:b0:2e:9f:b2:de:ff:b7:a4:3d:1b:
f1:bf:8d:8c:f8:d6:e1:60:2a:b7:92:ad:a4:3a:d6:
3e:7e:61:f3:d8:ef:70:ff:49:31:50:0d:2d:25:75:
85:79:1e:7c:1d:18:19:99:ef:dc:66:bb:cc:47:85:
ec:5c:08:25:8c:56:3b:71:c3:88:90:77:d7:60:09:
2d:57:1e:5e:a7:0e:f4:0b:3d:92:bf:18:9b:03:5e:
e5:f3:33:05:b1:e3:e7:cb:d5:b8:4e:ef:f7:96:92:
74:fc:df:8a:64:7c:3f:6d:54:8f:d1:b1:7b:f6:17:
15:54:75:98:c1:56:93:4d:65:a0:a6:4b:49:19:ed:
64:ea:9d:d7:6d:48:62:5d:29:12:d0:6f:a8:0e:46:
d8:28:07:db:fb:3f:b6:f2:78:fa:08:a4:96:dc:af:
d0:56:73:a7:e6:7d:d6:5b:0c:15:27:f4:dd:64:87:
9c:3f:00:b1:8d:40:e6:f9:1f:11:b8:d4:09:19:dc:
ee:ec:ac:17:74:a2:ec:84:c2:1e:2f:d4:50:6a:46:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:19:E1:9E:DF:C0:2B:2E:B0:77:B1:81:FC:AC:C2:2B:03:1B:03
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ee:bf:2d:7c:ac:d5:18:f6:e2:75:f4:99:64:81:06:30:22:
c3:f2:ca:2b:f4:dc:2b:dd:42:94:11:34:9d:5e:28:90:23:45:
e4:9f:3f:3b:a3:6a:6d:a5:2e:01:47:64:39:17:a0:29:01:2f:
6e:27:dd:f1:af:77:93:0c:8f:19:4b:86:21:f7:31:d2:0e:87:
1d:b5:97:5c:e2:f9:17:92:fd:31:e8:0d:89:96:c1:f5:78:4e:
a7:af:2f:f5:1c:0c:89:94:f9:88:32:91:be:1e:c4:4f:40:f1:
68:34:0a:0d:f5:25:64:8c:e9:00:ab:d6:06:a1:3a:2c:e9:0c:
45:fc:dc:c1:0f:12:0d:25:11:35:d1:c9:bc:ac:04:70:f1:44:
60:21:58:89:f0:1b:87:09:0a:a3:0a:f5:ce:db:f0:4c:9b:ee:
73:ac:fa:7d:51:83:3d:95:59:c0:74:94:ad:f1:92:32:9d:b1:
cc:fd:ac:96:dd:c1:06:73:74:73:ce:6c:e5:dc:a6:73:8e:aa:
47:4a:e5:88:f5:f9:cd:00:ab:1f:9b:a3:66:74:2e:83:e2:94:
92:44:6b:ce:f8:17:c9:c7:65:26:54:19:a8:2d:f4:f4:cd:00:
72:f3:cf:a5:72:2b:e1:d1:24:30:4e:20:2c:c2:73:20:1a:7f:
2d:00:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:23 2025 by rpki-client