Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: RJgv7BHJ6IaZPoE/oQe7T8xGxr+zz5elEeSEkL6R3To=
Subject key identifier: 0F:19:B6:35:EE:58:84:08:F2:F8:21:73:82:FF:07:BB:E7:09:5E:95
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 0198D4731C9CD0E869F5F6130A62EF8A4009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 0FFE
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: kNG84fmzFy/Py8V46oWyBIH57BpgEUAj9C6mR/pX6ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1c:9c:d0:e8:69:f5:f6:13:0a:62:ef:8a:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=0f19b635ee588408f2f8217382ff07bbe7095e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:21:ee:23:fc:ec:88:c1:9f:84:0b:28:b0:
35:38:46:26:f5:d9:c3:ea:25:7b:1d:ac:f3:e2:f0:
2a:45:04:75:74:1b:d3:ef:83:bf:c1:57:64:82:d8:
21:7c:63:da:a5:11:a4:4d:ec:dd:e2:ee:5b:0f:a0:
fd:46:6d:6d:87:55:4c:e5:d7:a8:55:d7:7e:e2:c5:
e7:c8:8a:fc:87:d9:9d:32:f7:2e:77:04:81:16:62:
98:18:56:28:3d:22:83:d3:e9:c7:1b:ce:d1:ca:fb:
89:62:69:4e:8a:ed:e1:a8:f9:f9:1c:9b:b5:87:e4:
5d:43:65:94:cf:02:f4:0c:34:3a:63:2a:11:ba:82:
90:9d:49:d2:ff:d1:99:cd:5e:97:93:e2:33:15:61:
cf:bd:3f:c8:a9:ee:28:f0:5a:95:e4:1a:a2:e9:06:
05:7b:e9:b7:ea:ab:1e:87:1d:fb:c5:bb:3e:7d:29:
a5:0d:c2:99:8c:e9:21:75:c4:51:f9:3f:bc:2c:c1:
4c:a5:f9:b5:8f:f0:44:ac:fb:1e:05:55:03:15:5e:
d7:85:d1:a3:f5:e6:88:a8:5d:0f:8a:16:04:1a:d1:
39:c4:8c:19:d2:4b:95:1c:b4:80:3c:9a:09:70:44:
b0:79:d4:90:6f:c0:56:be:bc:0f:82:eb:df:e5:95:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:B6:35:EE:58:84:08:F2:F8:21:73:82:FF:07:BB:E7:09:5E:95
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:8f:c3:cc:14:5e:8d:a9:17:cc:ee:2d:c7:e9:34:64:25:
7d:fa:51:03:83:b5:32:aa:5e:45:f3:ef:1b:ca:f0:c7:4d:20:
7c:74:6e:b8:5f:83:19:ec:f2:c3:c1:16:9e:a5:ab:8f:25:16:
df:37:8c:e2:d5:8a:b7:cc:84:bd:89:97:97:13:4d:59:17:f7:
48:1f:24:fa:80:ad:8a:dd:d0:02:21:00:5f:79:b4:54:13:61:
65:93:92:3d:09:d2:9f:48:84:11:00:08:f2:7f:cc:35:b7:45:
97:e7:af:f4:fd:8d:35:03:8a:87:5a:f1:4d:15:08:78:6d:11:
a1:f1:09:e5:a4:19:b1:50:7f:3b:99:34:7f:c1:69:03:2b:5f:
85:6b:2f:40:9a:42:41:62:86:9c:28:67:56:d8:10:32:e3:d8:
9b:ef:ee:61:43:6b:25:35:7a:13:e3:0a:82:26:ea:c9:92:7a:
ff:df:5c:ea:fb:de:93:68:9a:24:5f:c2:1e:3b:90:fb:ca:05:
79:69:e0:19:7d:a6:c4:4f:57:db:af:27:2e:9f:06:6d:41:19:
e4:7b:a4:82:fc:38:4b:6f:d5:b6:1c:7d:07:54:c2:81:22:9b:
f5:64:b8:18:ba:24:9e:99:67:87:a9:ab:b8:81:4e:de:2f:f0:
2a:39:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:00 2025 by rpki-client