Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: oeXz9vJAoYZTptRPhPgbGLt7wjoRzewUEbqfS/x/Unc=
Subject key identifier: BB:71:F4:D4:85:DD:F0:7B:DA:02:E4:FF:D8:D7:7B:F2:9D:7D:EB:84
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 0198D583FE13057A820B6784DACD09398073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 0751
Signing time: Sat 23 Aug 2025 06:00:53 +0000
Manifest this update: Sat 23 Aug 2025 06:00:53 +0000
Manifest next update: Sun 24 Aug 2025 06:00:53 +0000
Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: Rijwz3GE7HCQkBf8UVQ87bWs8epfqVF3uytJZsG7YzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fe:13:05:7a:82:0b:67:84:da:cd:09:39:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Aug 23 06:00:53 2025 GMT
Not After : Aug 24 06:00:53 2025 GMT
Subject: CN=bb71f4d485ddf07bda02e4ffd8d77bf29d7deb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:be:3f:78:15:b1:4a:2d:33:79:4a:e8:b0:
ee:a6:1a:5a:63:5c:96:a2:0b:7b:b2:01:5c:0b:91:
47:13:b9:13:69:63:f6:70:a6:a3:ef:c9:41:53:a8:
0e:6c:df:47:73:78:f5:7b:f8:bb:82:27:fc:3d:cd:
1b:a2:78:4d:51:ec:83:44:3b:7d:95:06:ba:64:8c:
6c:db:b6:b2:ef:22:ae:5e:bf:99:06:1f:8f:5f:2f:
c4:d3:08:38:b3:63:27:60:93:ba:70:9f:90:7c:e5:
48:50:5d:46:4a:e9:22:0a:f2:38:94:7f:7e:e8:f0:
27:2a:a8:9c:99:09:77:90:c0:5d:08:6a:27:8f:1f:
8e:ea:86:8c:a5:16:0e:30:3d:69:06:dd:3c:09:9a:
34:65:bd:cd:31:89:c1:6f:22:43:2c:d4:c8:6d:5d:
38:15:5f:7d:74:31:3e:2a:18:0b:b2:2a:be:95:61:
7d:3a:84:45:14:cb:4c:42:73:28:70:3b:3a:9f:57:
87:02:b3:83:67:b4:78:42:12:13:12:e9:41:5a:ba:
38:2a:9a:ab:ed:58:ca:1b:5f:09:ee:85:17:7f:36:
aa:84:1b:8e:ae:d8:22:06:dd:d6:86:1f:b8:52:48:
0f:62:5a:18:2d:c0:26:06:6f:95:43:be:90:07:21:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:F4:D4:85:DD:F0:7B:DA:02:E4:FF:D8:D7:7B:F2:9D:7D:EB:84
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:c2:c4:cf:5b:03:c9:58:07:b6:21:d9:e3:06:fc:54:85:
3e:a3:ff:52:4a:b4:af:85:2a:d3:bd:d4:d1:b7:e7:cb:a0:e4:
7c:2e:37:8a:bf:8e:3a:3d:2a:f0:06:c7:e2:db:c3:b2:0d:de:
03:4e:91:b2:72:be:4a:79:5d:6d:55:1f:71:82:95:92:e8:47:
da:b8:e8:33:15:cc:8d:74:81:b3:65:2b:cf:c0:b2:ce:68:27:
bd:ca:dc:36:7e:7d:71:d5:9f:89:d0:7e:5b:7d:76:27:fa:90:
d5:88:99:76:a5:7b:6c:d0:03:3f:13:27:0d:cc:a9:09:4f:70:
8d:36:b2:ec:c5:27:2c:ab:15:d1:89:00:28:96:7b:ad:ba:40:
12:7f:a3:40:cd:21:80:43:95:18:09:e2:84:a1:b1:52:53:21:
d0:7b:4c:45:b0:2b:10:60:b6:1d:cd:ab:40:ea:cb:45:52:90:
e7:f8:c4:ff:a5:a7:ba:e3:5a:6d:f8:03:fc:95:07:1a:6a:22:
d8:5d:e0:9e:17:9e:e8:fc:1a:90:42:3b:56:88:89:ec:a9:12:
81:91:23:a2:12:3c:9c:45:c4:be:3b:83:e0:9e:75:53:e4:cd:
a6:1b:0f:bc:fd:7b:6e:40:00:8c:c6:bf:bf:c8:64:64:dc:0e:
d1:50:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:37 2025 by rpki-client