Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: WugZfRevCLIYnP7XwGCBf4hsqZnjT0G6bS1WXzzLtd4=
Subject key identifier: 2D:CE:B8:35:66:02:6F:77:C1:F3:30:D7:98:36:F2:0C:24:63:71:50
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 0198D515FF843A8D645CE71AFA5F45545642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: qWxtc1MM+rVOMEajc80GvpfervjAqUQ3To3tt30AYuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ff:84:3a:8d:64:5c:e7:1a:fa:5f:45:54:56:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=2dceb83566026f77c1f330d79836f20c24637150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:f0:e1:76:f8:8e:b0:a9:73:b0:e0:10:42:
8c:91:d9:ea:73:50:8b:09:8b:f8:c7:c0:58:22:48:
c7:4c:5f:96:d1:16:96:8b:18:38:7f:a0:e8:d9:31:
d1:f3:a9:60:3b:c3:dc:97:85:ee:01:cf:14:25:20:
3e:13:ae:c3:b1:56:94:58:05:99:f9:f7:0f:2e:86:
71:b9:90:03:72:50:36:26:85:33:6e:33:c4:d4:13:
b2:a5:8e:16:26:c1:3b:50:ed:fe:3f:51:50:ff:a9:
80:7e:4c:4b:a9:14:ea:eb:b5:d9:df:eb:09:56:eb:
c4:ea:a2:52:f8:c0:8e:96:7d:38:9e:2b:18:c9:d7:
50:63:ff:4d:66:51:67:b7:d5:25:17:8c:c2:00:81:
03:72:5f:88:66:b7:bb:27:6d:a9:67:91:44:4d:3e:
14:35:ac:d2:86:14:36:69:d8:7d:11:d5:32:62:03:
90:97:3c:2a:47:dd:76:6a:c4:cc:1f:32:c9:82:0b:
b6:5b:92:d9:50:2d:87:bf:2b:b7:73:58:67:3b:cd:
17:83:37:1b:4d:69:94:57:46:6a:2d:ef:64:4f:d0:
4f:4d:a8:0a:4f:3d:f3:d3:16:29:84:30:8a:44:cd:
2c:dd:ba:b6:fa:68:e6:ec:48:07:47:18:b8:f0:fd:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:B8:35:66:02:6F:77:C1:F3:30:D7:98:36:F2:0C:24:63:71:50
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e1:bb:9f:0e:91:2a:19:d7:4d:88:7e:b5:98:73:36:93:2f:
81:37:d5:e7:f7:f5:f6:77:e4:1e:94:6e:8e:9d:f5:94:e6:9e:
d8:47:1f:07:73:11:db:9f:2e:1a:e1:8f:df:f4:83:bb:d7:d0:
63:83:b6:b1:d4:8e:ae:ad:17:03:82:3a:d4:61:5f:db:cf:2b:
99:1a:b7:5b:94:d6:98:6d:1d:a9:17:19:40:69:32:8d:fb:a1:
cf:8c:dc:84:7a:52:18:9b:5c:86:d4:d0:5c:d7:9e:2d:0b:90:
98:17:0a:94:7b:0b:68:91:75:4c:fa:a9:9b:2d:70:91:61:42:
d2:c1:a1:8d:af:55:5b:1c:21:e6:42:a5:a6:28:35:85:36:08:
b8:f2:23:61:89:cf:35:35:a0:70:56:f7:fd:1a:af:a5:bc:10:
58:12:a2:02:4e:99:3d:f7:74:4c:8c:d8:6e:2a:fe:55:fb:33:
b5:48:88:e5:7a:2c:1b:b0:5b:6e:54:4a:1c:9c:14:94:78:e6:
54:94:ba:0a:08:80:fd:41:5a:2a:40:fa:d3:83:bb:6e:2a:5b:
35:54:ff:d9:eb:9c:0f:70:29:67:59:6b:c4:12:cb:b2:ed:65:
83:80:6d:a4:e8:20:a4:69:cd:66:b0:e0:96:35:8b:7a:33:f5:
88:18:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:53 2025 by rpki-client