Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json)
Hash identifier: qBEhCmJuCqe+7vbfcJSSh3hxVS1ZAZ1L+DWy6xu3As8=
Subject key identifier: BC:03:E9:D5:FA:89:BD:68:50:31:B2:18:55:FA:E2:46:34:15:11:67
Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Certificate serial: 0198D54EC4F696BA4AA4DA981AC8270813FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
Manifest number: 3F
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: ry1mTu1VnAt7MBwKPq1zwm66Ue9xyWuPXwf+bl8/9Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c4:f6:96:ba:4a:a4:da:98:1a:c8:27:08:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=bc03e9d5fa89bd685031b21855fae24634151167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:e4:6d:93:90:fc:9a:cc:29:81:62:51:38:
f5:7f:57:db:30:89:39:72:20:80:ff:de:7f:5f:96:
23:59:cb:d6:75:c4:3b:f1:e7:76:d8:89:2d:b7:2e:
a9:7b:b4:5d:c8:fb:12:a4:03:88:b5:ac:1d:64:fe:
5f:5e:14:9d:45:31:5e:99:a6:85:bf:6e:ba:ba:52:
26:82:19:d1:47:53:43:8a:85:42:c2:40:73:ea:5f:
60:83:bf:37:f8:ac:ea:99:e8:1a:11:6b:72:bc:71:
91:b9:ba:85:ff:a5:4f:f0:d7:ef:f5:45:14:1c:35:
c1:1b:74:dd:ed:0e:20:f5:13:d0:81:f7:64:bb:17:
26:61:55:be:b3:0d:4d:d0:c5:d8:ff:5b:7a:64:33:
64:52:ec:40:34:98:29:3d:76:d7:c1:ec:f1:ba:e8:
7b:7a:2d:f4:3d:83:67:d6:fa:3b:c2:3f:f4:5d:ee:
d4:21:85:96:0a:58:dd:82:67:8c:7b:49:1a:70:7b:
73:7b:bf:11:39:5e:85:e8:d9:8a:81:ee:b0:a4:d9:
f4:91:84:3b:a7:65:66:14:dd:d1:76:90:3a:7a:f7:
29:f1:76:a2:ae:e4:fb:95:10:55:6d:c9:fa:81:20:
83:8f:08:03:4b:e7:0d:c9:d2:8b:43:2e:df:81:6a:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:03:E9:D5:FA:89:BD:68:50:31:B2:18:55:FA:E2:46:34:15:11:67
X509v3 Authority Key Identifier:
keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e2:6d:4e:0f:a2:f0:f8:11:df:fc:90:2c:b8:b4:68:1a:6d:
27:6c:0b:f3:1d:dd:6c:04:c5:07:2a:e7:3e:03:84:49:0e:5b:
d1:12:e8:5f:45:d4:94:8f:e0:df:dc:d5:4c:3a:6f:da:cf:07:
7f:b5:64:4e:84:7d:c5:b7:5f:61:3e:13:3c:d2:0e:c8:8c:be:
91:49:ca:2c:5f:01:65:96:55:16:1f:b4:c1:43:ca:eb:bd:3d:
fb:02:7d:5c:8a:10:24:e6:4c:85:f8:77:a6:04:e3:ed:d1:11:
9a:d6:61:90:45:18:17:8c:91:1b:8e:79:9e:1d:d8:b2:24:39:
d8:48:b5:b0:ae:21:c6:ba:c3:d7:02:11:71:a5:45:5a:3d:67:
ff:41:d4:78:85:e9:b1:ff:66:7b:6d:97:bf:aa:ff:f5:db:90:
95:a0:69:7d:65:da:b4:8c:26:78:67:83:54:e8:d2:d9:07:ce:
9e:80:1f:d3:81:46:4c:3a:ee:7d:c0:c9:f9:d1:36:00:69:a7:
17:a5:ac:41:79:aa:79:0d:8f:ed:2b:33:4a:95:26:d0:82:4b:
87:bf:2c:e0:47:ef:d1:50:b6:3d:42:6a:c1:7c:e0:f6:c6:4d:
27:47:98:f4:a1:3c:fa:7c:68:68:08:59:0d:58:38:f9:9d:8f:
84:2c:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:44 2025 by rpki-client