Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json)
Hash identifier: 68uNRCgsK/qR7blYi18CL96xWHb3WyC5+sfQJ+ORbds=
Subject key identifier: FA:1F:61:94:15:9A:28:29:EA:DC:C1:EE:82:81:36:65:51:83:72:B6
Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Certificate serial: 0199FAD834165B2E3CD87B010D275CA6C0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
Manifest number: D7
Signing time: Sun 19 Oct 2025 05:01:37 +0000
Manifest this update: Sun 19 Oct 2025 05:01:37 +0000
Manifest next update: Mon 20 Oct 2025 05:01:37 +0000
Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: cTBAA4hxfsmdnZOzP9Js1W1YzBjSSCxLfoQUPvB1Iqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:34:16:5b:2e:3c:d8:7b:01:0d:27:5c:a6:c0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Validity
Not Before: Oct 19 05:01:37 2025 GMT
Not After : Oct 20 05:01:37 2025 GMT
Subject: CN=fa1f6194159a2829eadcc1ee82813665518372b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d3:dd:eb:9a:ba:ce:1d:f7:0a:cb:36:85:11:
0f:8c:c9:cc:ee:2d:6d:3e:8c:aa:7f:9b:ab:70:78:
68:35:8a:5f:72:bd:25:b9:83:4d:ed:8a:f7:b5:35:
ea:ce:eb:e5:24:e4:51:4e:03:0e:62:56:32:2e:79:
a3:57:4f:ec:26:4d:d5:8e:69:98:c2:92:0f:f1:80:
4a:e8:74:20:c8:41:d3:f7:61:17:b0:7b:4f:a8:e5:
de:d6:12:0d:00:bc:11:a8:20:b4:ce:79:09:b3:ce:
26:a1:f0:c2:2f:91:2a:00:35:87:d5:51:d3:9e:f1:
8d:d9:03:e2:b3:04:08:e2:6a:c2:82:ad:1e:b4:18:
d0:07:22:8f:86:63:50:c8:46:1b:16:be:f5:9a:5b:
7f:6d:19:ad:b1:1b:e6:a4:67:84:a6:22:85:13:7f:
45:20:45:68:5f:cb:2e:0c:1c:e5:b9:9b:38:bb:39:
a3:7c:7d:1b:27:ce:8a:d4:a2:4f:e0:d1:27:46:81:
f3:a1:fb:7a:81:f4:e8:54:22:b8:a3:21:f3:48:8e:
c8:bc:eb:5d:55:26:ef:b0:2d:4a:7e:a0:21:c8:32:
f8:cd:18:62:7c:6d:e2:a4:1f:b2:1c:ae:43:85:d6:
e4:3c:a9:44:ed:0a:51:a7:07:07:1f:c3:72:f2:75:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:61:94:15:9A:28:29:EA:DC:C1:EE:82:81:36:65:51:83:72:B6
X509v3 Authority Key Identifier:
keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6f:69:1a:d0:c3:39:2a:12:f3:24:25:00:8b:c8:45:d3:3f:
8e:78:11:ed:17:ef:e0:57:96:29:59:28:93:b8:2f:75:f3:19:
95:fd:97:d2:c6:60:cc:83:5c:04:06:c5:bb:ee:d8:e8:78:42:
b0:49:e6:89:1a:54:9c:87:e0:11:6d:d3:ee:f0:89:58:1e:13:
f4:a1:52:4c:12:f3:1a:5f:6f:ba:3a:70:ee:c6:a7:5b:b7:a5:
aa:d3:d3:fa:d4:23:5e:41:9c:bf:28:35:ea:9e:4d:44:03:8a:
86:25:04:46:30:50:dd:48:18:91:88:5f:98:e4:2a:ad:4a:1e:
b6:97:ee:96:6f:04:12:33:09:59:4d:fd:7f:da:47:b8:ef:a6:
c9:98:db:35:ea:d6:b2:54:2e:31:5c:91:ee:d3:2c:f5:58:47:
e3:c1:33:8c:20:f6:b3:bd:54:42:2a:9b:af:7b:68:88:a4:65:
07:a6:b1:da:d2:14:53:43:43:e2:10:b6:15:33:9b:1b:82:58:
41:94:c7:16:91:87:44:60:63:d7:45:cd:eb:c0:92:43:77:3c:
94:d1:b0:df:72:19:97:88:79:30:d5:4d:36:53:b7:d1:92:f0:
d1:d3:66:81:43:0b:57:92:f2:34:ca:28:99:19:2e:97:04:48:
ef:b8:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:21 2025 by rpki-client