Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier: cuebo7cZN1HIjqvNhl9LfWTUqgcOY9wiF+BG1phYN+w=
Subject key identifier: AD:05:7A:CE:40:F4:30:B3:04:AD:FB:AF:9C:46:AA:82:49:37:2D:91
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial: 0198D5BC5EC7BE10BAFF34421AA5129D027A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number: 06D3
Signing time: Sat 23 Aug 2025 07:02:28 +0000
Manifest this update: Sat 23 Aug 2025 07:02:28 +0000
Manifest next update: Sun 24 Aug 2025 07:02:28 +0000
Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: 3AOvPM9Rz9JxXf/DANGwr/sv9Rqa4ZeTVBQp8qxLo7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5e:c7:be:10:ba:ff:34:42:1a:a5:12:9d:02:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
Validity
Not Before: Aug 23 07:02:28 2025 GMT
Not After : Aug 24 07:02:28 2025 GMT
Subject: CN=ad057ace40f430b304adfbaf9c46aa8249372d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:9f:34:40:51:4a:89:f8:73:ae:af:59:9b:
4d:b7:96:50:11:d3:15:63:a0:48:d6:1d:69:66:21:
1e:ce:31:81:5a:36:30:79:c1:ac:8f:b0:ff:dd:4d:
20:82:bf:92:24:0b:44:3b:cc:3a:35:47:84:36:c9:
33:24:09:a7:be:b7:c6:0c:3f:72:a5:9e:b7:15:9d:
3e:50:5e:1e:08:52:49:6a:14:34:26:1d:03:a9:53:
5a:9e:6b:2b:4a:73:6e:1a:91:52:26:38:df:fe:4f:
c8:f9:7b:eb:b1:e7:00:5f:14:b5:9a:77:46:87:4e:
a9:55:18:09:58:33:d5:cf:ac:03:a9:06:8d:34:cf:
43:fa:51:ce:50:be:94:ea:92:77:fd:cb:3a:88:ae:
14:8c:66:66:b5:92:2a:12:cb:96:f3:0d:18:e1:51:
43:d2:7e:47:e0:b0:b2:a5:4b:c2:70:fa:67:82:b4:
9f:60:47:a4:8f:8a:87:45:a8:78:99:0b:d2:25:1e:
59:5e:c0:a1:36:e8:22:13:9a:e2:68:3c:54:05:b0:
4d:8f:b6:ed:01:f9:d7:94:54:68:5e:6a:dd:6c:32:
52:11:0c:cf:60:45:91:b0:c0:46:7e:0e:e2:bb:38:
76:87:01:74:22:0d:11:46:5a:82:a2:e6:35:75:98:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:7A:CE:40:F4:30:B3:04:AD:FB:AF:9C:46:AA:82:49:37:2D:91
X509v3 Authority Key Identifier:
keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1a:03:52:ee:16:51:f9:d8:c6:1b:1a:74:a2:73:ee:02:4a:
a4:21:6f:27:05:96:04:50:2c:6f:6b:3c:a4:b7:8a:45:a5:17:
ff:b9:95:6c:34:51:cf:a5:b4:a9:6c:8b:4d:e2:92:2e:31:19:
d4:3f:d5:91:82:5b:33:92:45:7e:b3:49:8f:b7:91:39:24:4d:
65:4d:a1:09:34:da:5c:9d:6d:66:28:65:23:98:7b:a1:49:87:
4c:87:09:9b:e5:c6:c9:8b:f5:78:8c:41:4d:86:ec:0b:67:10:
31:f1:6f:b3:45:22:9b:50:33:96:cc:06:80:e7:54:7c:64:05:
45:d4:93:4b:f8:bd:02:8c:01:a9:0e:ff:4a:8f:40:49:07:0f:
7b:27:56:d0:16:d3:83:32:3f:57:4d:6b:ff:e5:f1:ba:d1:fd:
96:9d:c4:13:66:79:fb:a7:2d:98:e1:02:c8:18:07:43:f0:e8:
0d:9f:b8:11:96:67:51:db:58:25:10:76:1a:3e:ed:2e:3e:08:
60:2c:cc:69:94:26:5c:42:48:ec:67:d0:18:bd:9e:93:fc:a1:
13:67:61:0b:db:9e:80:67:d7:44:b6:e1:f0:e8:4d:b2:9b:fb:
88:ca:0c:66:54:48:54:f4:f5:52:cb:01:a6:1b:b8:64:d1:44:
9b:0e:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:22 2025 by rpki-client