Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: DXApQiSWTrhM436cJo6SRGrnPBK3T1QoBn9EVZeYwos=
Subject key identifier: 55:7F:87:83:FB:14:8A:10:39:D2:8D:24:00:D3:7E:97:37:B3:4A:22
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 0198D4E0B0A2DC6D42ADCC0F70A681CDA1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 03C3
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: XnobeetaA95//xUUl4u4Do1sYuUQDdsyTR1eb3ZJ3Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b0:a2:dc:6d:42:ad:cc:0f:70:a6:81:cd:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=557f8783fb148a1039d28d2400d37e9737b34a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:52:14:c9:2c:d8:d4:1f:23:80:13:3b:39:
53:d3:94:39:9f:61:22:af:cd:3e:08:a9:ab:c9:ac:
10:8e:3f:8b:a3:bc:ef:be:a4:24:2f:91:5d:ad:23:
5e:07:f9:fd:30:bc:c7:84:eb:08:c8:25:b6:d4:4b:
74:34:f3:65:1e:9c:4b:b8:a7:14:b4:c5:b6:80:e4:
14:fa:74:ef:86:6b:87:1a:68:4e:0f:6b:ef:c8:e5:
f0:14:22:e9:4f:20:88:e5:82:20:51:29:6c:5a:e9:
73:41:fa:e7:e4:96:14:77:5a:e7:15:89:e7:66:bd:
e6:f5:87:c8:c9:df:50:8d:53:7d:c3:b8:35:f5:9c:
45:62:19:bb:b7:63:ef:32:c4:da:32:bb:d7:7b:f5:
9e:08:92:b5:64:5a:9b:d1:a6:b7:4c:6f:d7:3d:8b:
8d:f5:a2:15:aa:a1:15:97:5f:18:e5:00:55:92:1f:
cc:7d:01:d4:cf:f0:ac:5c:76:80:7c:c4:6a:c5:20:
5a:3b:d5:3c:a5:10:91:b9:c7:ec:9f:2f:a8:b1:7a:
ca:35:7c:f7:cc:80:5b:57:46:3e:a0:e7:45:9d:dd:
20:98:dd:47:fa:04:4a:da:21:29:7f:2c:85:9d:14:
52:ad:66:17:4b:b2:b8:e0:51:93:26:42:72:49:05:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:87:83:FB:14:8A:10:39:D2:8D:24:00:D3:7E:97:37:B3:4A:22
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ee:f8:f2:d9:2e:cf:66:d5:c3:1e:45:b5:d8:91:b3:2a:7e:
d0:74:e6:28:45:1a:16:d0:52:a9:66:d0:ac:9b:ed:0b:69:8a:
76:de:81:7d:9a:54:97:6e:d1:95:75:48:e6:40:f1:1a:f6:0a:
ef:23:32:12:a0:4f:b8:49:c2:69:2a:4f:00:28:bd:bb:d4:af:
3c:cb:e0:d5:1f:ec:14:42:90:4d:33:0c:7a:71:be:67:34:96:
9a:af:d8:05:ae:8f:67:54:e2:b8:3a:94:30:c7:36:4b:02:c8:
d0:c7:52:0f:0f:5e:d5:a1:cf:8b:7e:c0:c7:75:3e:46:80:df:
66:f9:06:9b:dc:3b:cc:f5:d3:3c:41:2a:98:35:aa:7a:0e:16:
07:b3:4b:ce:89:24:89:3d:bd:5f:3f:aa:f8:b2:38:0c:d0:ce:
cf:ad:f5:9d:07:55:d8:11:73:e8:06:39:db:6a:76:ab:d2:aa:
c2:16:75:f5:ab:cb:97:91:bc:21:7a:4f:48:3d:d6:b2:5d:dc:
4d:82:20:bd:b4:e5:90:1b:f3:4b:62:92:17:22:e0:82:d3:c8:
59:bf:e9:09:33:52:70:37:df:b5:5a:c9:af:1c:86:ed:98:d5:
e0:4f:13:54:aa:33:63:7b:75:81:a9:d0:36:65:c2:7c:2b:90:
1f:cb:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:19 2025 by rpki-client