Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: CHLcdoRSND/Vd5SnugL3tE7wEPD4aXJt7g9PYq/isGk=
Subject key identifier: 13:14:47:77:62:A8:88:D1:E4:88:10:35:F7:99:56:91:AF:AE:44:D6
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 0198D54DDD77BFE888F56A11D6550D294224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 085C
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: Ild5S+Jqxyw5VG//zG+dzbGKmZknYvKPLk2VMxuN5qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:dd:77:bf:e8:88:f5:6a:11:d6:55:0d:29:42:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=1314477762a888d1e4881035f7995691afae44d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:12:e2:ab:68:56:ac:20:82:d8:9b:a0:94:
88:60:cf:41:0e:b7:a2:73:2f:e4:fb:b5:36:fe:f4:
60:03:e6:4a:40:94:5c:38:49:c1:28:33:5f:47:49:
cb:4f:fc:48:eb:f7:a0:71:d9:51:2d:1d:d8:58:38:
cd:9a:6b:f8:53:3a:85:81:2f:0c:d6:18:2f:c2:d9:
90:a9:0a:ba:0a:c7:ca:47:38:2b:d6:70:81:af:13:
ae:43:eb:30:25:0b:da:0b:71:92:39:68:71:6d:e1:
e1:a2:c6:d3:94:d3:26:7e:c4:00:a5:3f:cb:cc:1b:
c5:9b:c5:f6:3e:d6:0d:be:13:30:ba:d3:ea:65:56:
a5:e8:7a:df:46:fc:87:eb:cc:07:0d:22:46:02:85:
7f:0b:db:04:13:c1:18:3c:40:00:5b:e8:ac:db:ac:
f5:dd:16:2c:93:42:92:ce:94:c3:10:2f:1a:58:5b:
b2:b0:24:34:21:a3:96:81:20:da:21:71:00:45:56:
af:55:a1:54:18:6b:14:b1:36:57:bf:c0:d7:e5:7a:
fc:81:3b:21:91:7e:36:af:91:68:57:8e:9c:3f:7b:
35:4c:6d:71:08:f3:99:1b:02:34:b1:bb:5f:75:fb:
31:d2:08:67:dd:50:61:5d:55:e7:0e:10:bc:5b:6c:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:47:77:62:A8:88:D1:E4:88:10:35:F7:99:56:91:AF:AE:44:D6
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:77:a4:be:93:31:ec:cc:8a:47:68:2b:18:e5:ae:46:36:
0e:98:40:3f:20:94:2e:0b:1b:20:3a:2f:4c:1e:06:38:d2:e8:
7f:81:9e:84:cd:a5:82:8c:48:8e:23:4d:a8:e8:07:91:1a:45:
0d:3c:e3:5a:52:e8:56:12:19:d0:e5:20:b6:44:c9:ec:c1:fd:
8d:2f:0b:91:ab:23:9e:e9:81:ec:b2:c1:6b:eb:fb:3c:d6:e5:
5d:b8:63:71:f7:f1:cc:72:c6:3e:96:ea:8b:56:0f:d1:9d:59:
64:d8:94:d2:cd:50:e7:98:72:4a:79:60:ef:c9:46:08:93:f8:
40:1c:52:36:22:ab:fd:63:fe:8c:b5:63:ed:79:79:55:b1:2f:
fe:65:6f:fa:e9:ae:2e:8c:ac:75:0a:1d:0a:04:43:d3:81:61:
c2:2c:06:dc:46:ec:c9:50:47:09:f2:e5:29:78:a0:a7:c5:4c:
dc:36:b0:79:b2:ea:06:aa:c8:93:4d:71:a7:4c:f2:89:10:1c:
38:b4:97:c2:42:0f:bf:a4:e1:09:33:77:a5:92:10:1e:fd:24:
0e:70:98:29:08:3b:a2:6f:e2:d6:e2:90:01:8e:0e:7e:db:95:
31:df:fb:ff:e7:cc:d9:3d:b6:67:9c:5a:57:b7:23:9b:01:28:
9a:34:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:15 2025 by rpki-client