Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
File: 0j-srhXcQXxpxcjqpKwlK94JFJk.mft (raw, json)
Hash identifier: la3G3C+EQMFCRTUffNKy9ctyoMlmv/qpJmVEGN87DiM=
Subject key identifier: 4B:B6:04:A5:07:10:EA:68:6A:96:96:A7:16:ED:B9:A2:18:E2:28:72
Authority key identifier: D2:3F:AC:AE:15:DC:41:7C:69:C5:C8:EA:A4:AC:25:2B:DE:09:14:99
Certificate issuer: /CN=d23facae15dc417c69c5c8eaa4ac252bde091499
Certificate serial: 0198D583E9DEB55D1B6B0AD6466A6715D6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j-srhXcQXxpxcjqpKwlK94JFJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
Manifest number: 0D
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: 0j-srhXcQXxpxcjqpKwlK94JFJk.crl (hash: KRhs2gfjd1F0RBzMUrc/G2qygIQnHq3Ixq1HEuy1PDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j-srhXcQXxpxcjqpKwlK94JFJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e9:de:b5:5d:1b:6b:0a:d6:46:6a:67:15:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23facae15dc417c69c5c8eaa4ac252bde091499
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=4bb604a50710ea686a9696a716edb9a218e22872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:9c:ce:88:31:3a:34:c9:a2:3f:15:11:cc:
92:1f:98:21:2f:71:ee:8f:18:aa:87:0a:31:8c:3e:
22:5c:57:8f:d5:78:fb:65:16:b7:fd:e1:85:49:3b:
04:17:fa:93:b6:49:f5:11:7e:7b:30:3f:71:46:fb:
8b:2e:ee:fd:33:9e:4f:70:01:3f:de:cb:00:6e:a0:
5f:e2:d4:02:9f:3c:d9:7e:03:85:c4:a2:1c:27:9a:
6c:b4:8e:b6:38:d7:10:2e:a0:e9:5b:83:81:5e:c7:
ce:c3:6c:48:b6:38:43:8a:12:53:4a:7c:96:66:6e:
1b:98:6d:84:49:b9:1c:03:85:a2:00:f7:81:7f:99:
a0:a0:13:43:5b:ec:57:1f:29:e7:12:bc:2c:15:55:
98:70:61:b1:61:a9:1d:61:8d:21:89:ed:35:c3:0b:
84:ba:e4:af:1c:bf:3a:28:80:09:b8:3d:2a:37:e8:
5e:fa:10:c9:44:50:5c:bb:9a:fe:b0:6c:a4:c0:ec:
a4:5e:b4:7f:c5:92:89:78:ab:0a:75:ab:53:9e:31:
97:92:99:01:90:b7:1e:53:8e:da:b8:5e:f3:6c:5e:
90:58:f5:9b:ab:da:83:81:fe:f4:66:6c:98:78:5b:
c0:f2:66:b6:1c:cf:db:2d:65:94:ba:ff:00:0b:de:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:04:A5:07:10:EA:68:6A:96:96:A7:16:ED:B9:A2:18:E2:28:72
X509v3 Authority Key Identifier:
keyid:D2:3F:AC:AE:15:DC:41:7C:69:C5:C8:EA:A4:AC:25:2B:DE:09:14:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j-srhXcQXxpxcjqpKwlK94JFJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4f:a7:8a:a3:df:a4:fe:5b:2d:f6:e9:f5:11:ad:27:03:ed:
88:10:d1:51:c4:61:7f:55:fc:99:cc:4e:46:f2:bf:ad:d5:ab:
1a:0a:69:b8:66:6b:1b:2e:3c:9e:18:69:9e:db:12:aa:75:f7:
f6:85:06:00:88:48:29:bf:87:13:f7:ff:d6:70:fa:70:2e:55:
0b:cd:c7:ca:8a:f8:f1:3a:3e:c0:fc:89:af:7d:63:64:bf:78:
60:cd:67:f7:65:f6:cf:d1:dd:39:56:fa:02:3e:83:62:15:51:
e8:2e:4b:33:03:87:27:2c:01:c1:cc:90:27:39:dd:3d:69:5f:
a7:2a:48:79:48:4a:8a:29:36:10:8c:df:79:dc:07:b4:86:64:
12:75:4b:5c:7f:35:be:78:86:be:7c:71:a7:b4:60:4d:73:0b:
c7:b3:b0:a1:42:c8:bf:b0:8b:8d:c4:ac:cc:f2:c2:16:91:b0:
70:a3:7e:94:a4:7e:a9:16:b7:43:af:34:e7:49:98:06:22:7f:
61:e6:3f:18:70:65:54:50:15:ab:ce:b6:dd:d1:6b:c9:61:9f:
b0:e4:3f:a2:a6:76:6e:0e:d1:0e:77:3d:08:7f:8c:c8:a2:3b:
bf:ef:2b:a6:d7:df:1c:65:2a:73:46:b1:b0:b6:83:ec:2e:e6:
8d:a5:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:55 2025 by rpki-client