Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: stQFBT/bRxBE2z2fLQswXNP8d/St6P8ah2P7d2leebg=
Subject key identifier: 09:AA:FD:DF:1D:43:F7:66:32:B7:C5:41:96:CB:D4:16:EA:C3:15:BA
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 0198D6601A4745F57097B06F9DCF3C98E55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 0769
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: 8+2J7HZMYn2XIZnUZ+fQl952A7SQ7ryhwanpqImEIQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1a:47:45:f5:70:97:b0:6f:9d:cf:3c:98:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=09aafddf1d43f76632b7c54196cbd416eac315ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:01:19:f4:f0:7b:5e:a6:2b:a8:2f:ed:e6:0b:
61:06:d4:e0:c7:b9:57:0d:4a:30:19:77:3a:29:dd:
1a:21:3b:6f:67:2a:3f:7e:b5:76:1c:a8:6c:01:c7:
de:df:b4:a6:9b:f5:77:4d:66:8b:ef:b6:af:24:2f:
62:da:e5:a1:1f:f9:2f:14:7d:e7:f9:81:b1:2b:8c:
2c:6f:0b:b8:c2:0e:a0:9c:17:3c:46:26:a5:b3:4b:
1d:ab:69:b1:48:b0:b3:c0:2a:a5:19:05:aa:7c:72:
af:62:82:bf:e5:1a:57:c7:48:b7:da:ad:c2:31:a5:
0f:bd:08:48:0c:a2:b2:5d:64:93:10:e7:5a:6a:d7:
07:ef:c4:36:6c:c7:7a:95:41:42:21:f6:c1:62:e7:
d8:4a:00:13:19:17:b7:ba:56:5f:d4:7b:0b:3b:ef:
6f:99:77:90:cc:cf:98:0d:b1:77:8c:94:bb:b5:e3:
2f:4c:cb:60:f1:b9:59:c4:5c:19:d6:c0:1a:2d:a5:
58:c8:5b:67:a7:e3:4c:c8:0f:99:51:5c:cb:93:b9:
6b:4b:3c:01:90:1e:ac:a3:05:5b:c3:28:d4:18:d0:
67:d0:2a:45:f3:83:fb:21:da:1a:66:5e:12:ac:92:
ac:f7:e3:8a:64:1d:5d:e8:f4:46:d1:dc:dc:9d:62:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:FD:DF:1D:43:F7:66:32:B7:C5:41:96:CB:D4:16:EA:C3:15:BA
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:29:d1:87:63:a6:84:ed:07:e8:de:49:48:4a:6a:05:6a:
2b:77:6f:e9:17:59:79:ed:1c:17:8d:b5:30:ec:a8:df:a2:55:
03:43:cf:dd:a1:d4:cf:f3:26:9c:11:22:52:e9:13:96:a6:71:
e4:40:2c:44:38:44:64:57:05:a2:19:02:3f:fc:89:90:46:7c:
2a:c0:30:fd:de:d0:a3:f1:63:91:68:f5:15:98:20:e2:cc:a2:
c6:13:ab:31:90:b7:a8:61:bf:e1:84:c9:51:cd:d7:84:48:7a:
e4:4b:3f:05:c8:95:b7:1f:51:51:c1:a0:ce:4a:1c:4a:d2:b5:
83:a5:8b:c2:bb:76:c6:aa:b0:fa:57:41:49:74:07:3b:57:35:
43:fe:bd:30:48:1a:27:21:e2:53:e9:08:b3:47:3b:7a:a2:f3:
e9:52:82:98:9c:e2:04:cd:63:71:88:30:1c:70:d7:e4:5a:51:
d8:e0:5f:6b:b2:2d:35:f0:99:2b:68:db:80:17:8c:33:ba:31:
d3:1d:c4:d4:7f:04:8e:71:e6:7c:e2:81:40:52:09:f5:b5:fe:
cb:63:c3:db:c9:e5:ea:5d:e0:ba:8d:15:c9:41:bb:7c:83:13:
6e:9c:5e:3c:37:c5:c8:ab:95:06:4f:4a:c9:78:e6:6a:10:fc:
4a:76:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:16 2025 by rpki-client