Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File: j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier: oA6rqeckFoqiKyIMlJDlTKcg/5f7E1rlU7he8FkS9G0=
Subject key identifier: C3:22:1B:D0:E3:16:DF:B4:61:F8:AC:AD:2B:3E:87:6E:C6:6B:CD:03
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer: /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial: 0198D65F0234DB452B98F43CFCC27FABE736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: ++pv9EyaLlS4qEyvAMUicOZVkeZSPCLGbU2Wz/DeSPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:02:34:db:45:2b:98:f4:3c:fc:c2:7f:ab:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=c3221bd0e316dfb461f8acad2b3e876ec66bcd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:f2:26:51:fb:c0:b1:d6:03:e1:cc:f5:e0:
fe:14:07:56:5b:4e:18:51:d8:7a:3f:2e:54:f2:b6:
f2:13:18:85:88:ab:fa:cd:ee:12:07:f2:be:3e:fc:
32:33:ee:58:64:09:fa:98:10:47:f7:46:24:ef:29:
f9:63:06:07:f4:0e:1e:19:6e:aa:b3:3e:9e:ba:db:
d5:ac:a3:c4:d9:ae:1b:3e:a9:4b:98:4f:1e:66:8e:
de:72:62:29:1d:55:f1:43:79:6c:1f:db:3a:b0:20:
7d:7a:9b:07:42:d9:fe:53:57:4d:e5:63:7c:13:8d:
80:0a:3b:40:c2:3c:f9:20:0b:c3:a9:bb:b5:77:03:
d6:65:60:0e:ad:9e:13:0e:53:c0:b5:7d:b8:3f:97:
2c:b4:7e:d1:96:d5:b9:ad:dd:19:b9:88:7b:ea:b8:
f3:fb:73:f2:bc:f9:de:7d:f1:47:97:7b:2f:8d:4a:
1f:f3:d5:d9:5c:46:05:0c:85:a9:f5:00:93:27:04:
af:7a:5e:3d:fc:d7:23:66:92:df:5c:d7:32:2f:d5:
91:a2:49:5b:56:1d:d3:3e:10:6f:9a:17:fe:d4:77:
45:e3:8b:7b:04:7f:1d:fb:d1:71:54:e0:c5:93:c5:
78:ed:80:68:41:5f:0a:8d:87:0b:f5:66:1c:22:e8:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:1B:D0:E3:16:DF:B4:61:F8:AC:AD:2B:3E:87:6E:C6:6B:CD:03
X509v3 Authority Key Identifier:
keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2f:8d:a3:a0:21:cc:ba:97:b6:b9:19:01:6b:4c:79:82:b0:
8a:5c:87:ac:4b:25:e8:a3:63:be:08:e8:02:4a:d5:c8:38:9f:
eb:d3:d7:33:53:6c:b1:8d:e2:65:82:fd:73:5d:a5:d1:42:9b:
cf:cd:7e:b4:1a:1b:d7:cd:af:f2:c3:c6:f3:65:d8:96:2a:5e:
1d:c6:e6:ae:c6:99:c4:73:f6:5a:7f:db:20:c4:72:d2:68:46:
05:c0:69:cc:30:9c:cb:f7:78:12:07:6b:64:7f:73:b2:8b:f1:
55:f1:a0:8a:7c:45:cb:35:d6:39:41:e0:99:a1:ea:29:d1:08:
4c:4b:5c:64:b6:ec:c2:59:7e:71:b9:8e:40:a3:fd:67:9f:c0:
42:9b:11:78:e8:d0:e6:3c:df:7e:c2:bb:bc:da:8b:32:69:ce:
82:90:48:02:28:ee:71:e4:ac:e7:04:4d:f2:80:d7:c7:d1:b1:
d7:21:ce:2a:16:56:33:b8:4c:ba:0a:00:9d:e3:93:d9:41:e5:
68:7d:fc:75:e5:d7:ad:a1:9e:bf:98:37:f7:e8:45:13:b3:c9:
07:1f:7b:f0:d5:2d:b2:44:f4:4e:17:26:61:29:52:aa:43:57:
ee:9c:af:be:22:ea:32:3e:f0:9d:74:be:fd:cf:3f:35:09:df:
d6:cb:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:06 2025 by rpki-client