Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: 7QL2oPmoM+QyCZkKHTGY9gR5PrrVhPzuIfX0rixmr8Y=
Subject key identifier: 02:70:6C:70:61:0C:79:30:80:B4:DF:3E:2E:91:51:56:09:61:D8:EF
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 0198D473A3EB029C7E38758495BD077E341C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0F42
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: PFrA/2Uefn22TzC9rncWJMEkd27HcX6kZCRNh3CfeSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a3:eb:02:9c:7e:38:75:84:95:bd:07:7e:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=02706c70610c793080b4df3e2e9151560961d8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:a0:fc:df:e1:34:9b:fd:50:d9:8b:d4:b8:
58:da:50:07:cc:48:ec:be:58:2d:59:73:3d:8d:f5:
54:f5:73:ee:c5:e5:d5:ed:82:db:fa:30:f7:4c:7b:
39:b8:21:ee:bc:d5:00:49:36:ea:bb:d1:0e:0e:48:
39:fe:18:4e:9c:35:8f:b6:5a:51:82:bf:30:12:71:
ff:b8:c6:10:d2:7a:9d:fd:9b:1f:f3:87:1d:38:43:
1a:32:a3:ce:04:57:c6:e8:3c:a6:8b:cf:73:33:19:
03:df:d9:55:3c:2a:3c:7b:4d:58:c2:e8:33:8c:04:
b0:69:ca:bd:4e:fd:e4:92:f2:73:5d:fd:d4:a5:92:
5a:9c:4b:49:fd:57:25:30:8a:91:22:e9:29:07:0c:
59:38:a2:3b:5b:da:a9:5b:1e:02:f7:40:b7:1b:05:
e9:ef:50:26:ee:7b:ef:d2:23:6d:3e:d3:2b:bb:46:
cb:25:f1:5d:ec:ff:c9:be:2e:20:6b:6a:6e:93:49:
11:f7:83:0f:97:1d:19:43:41:43:3d:3d:0d:b1:05:
35:12:09:7d:d0:70:00:94:bc:86:73:ee:53:2b:ba:
54:63:9f:b5:81:28:8d:ee:f2:61:a2:11:75:60:a8:
f4:ad:74:3f:9c:53:e9:5d:68:2d:dc:dd:0e:3b:c5:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:6C:70:61:0C:79:30:80:B4:DF:3E:2E:91:51:56:09:61:D8:EF
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:63:28:c1:42:ce:f4:8a:fd:7d:23:70:71:85:e3:b6:3b:b7:
1d:87:93:2e:78:e5:8f:48:02:ee:49:e5:6d:d5:3b:09:91:5d:
9d:e9:97:34:d3:b8:b6:a4:68:5f:14:59:5c:b9:65:f4:45:51:
67:0a:bf:c7:72:a8:de:44:05:eb:76:da:f6:25:28:89:71:ef:
9d:54:53:12:87:0d:bb:91:1f:6c:25:ef:0a:1b:46:ed:57:3d:
0f:df:11:78:36:60:ca:2d:37:c8:46:7d:64:8a:5e:e2:61:f6:
c1:87:7b:03:97:da:51:e5:46:76:0b:b5:41:35:1f:35:7d:29:
2c:81:c2:fb:42:0f:15:d7:dc:f1:64:6f:67:c7:d5:c6:40:fc:
91:a1:93:0b:c7:db:80:6a:d6:07:5a:15:d2:b4:db:51:2e:65:
30:d0:7c:67:df:57:cb:6c:41:8c:43:ea:1f:6d:c7:80:06:33:
04:b2:c7:d5:94:9d:4b:bd:fa:cf:91:89:3c:95:3b:ab:11:27:
2e:bd:27:bb:ab:85:40:8d:14:db:67:96:bc:08:f1:08:9d:f2:
b0:7d:73:e9:9e:01:df:21:66:cb:67:6c:92:82:9e:2e:c4:6a:
a6:a4:5b:66:3f:79:fc:fc:f1:03:49:0e:f1:ff:d3:93:39:ce:
eb:51:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:37 2025 by rpki-client