Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: xZaHfB8BbI0xt3U2Ri5wAn/TSMDB53IzgO/TvILoDOk=
Subject key identifier: 66:86:0A:B8:13:F7:D8:71:21:2D:B0:5F:8D:19:15:FA:04:30:46:B0
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 0198D698070E82F14BAB5B1C5D255BCCFE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0EEB
Signing time: Sat 23 Aug 2025 11:02:24 +0000
Manifest this update: Sat 23 Aug 2025 11:02:24 +0000
Manifest next update: Sun 24 Aug 2025 11:02:24 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: aSIQVK8j56vfNbAH/KnLdMSFWOIcT7gC83O7yBXoqIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:07:0e:82:f1:4b:ab:5b:1c:5d:25:5b:cc:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Aug 23 11:02:24 2025 GMT
Not After : Aug 24 11:02:24 2025 GMT
Subject: CN=66860ab813f7d871212db05f8d1915fa043046b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:bb:1a:3d:e9:ff:fc:ae:d4:cd:a9:83:c6:
8f:5f:ef:85:ef:f9:a9:75:4b:7b:ab:7c:48:66:8d:
6a:bc:5d:56:43:64:63:5c:b0:41:e0:ef:3c:7d:60:
9a:7d:2d:d6:d2:31:3f:76:e7:6d:1a:76:da:8d:a8:
8e:e2:0a:e7:40:c1:6c:ea:23:ef:32:ea:4e:54:4c:
92:d5:e6:7a:2d:18:74:a4:ed:2c:c8:c0:96:9d:1e:
1d:41:c9:a1:f9:1f:2e:44:37:e5:fc:d5:67:a7:3d:
32:a7:8f:2a:95:9a:a0:20:d7:58:57:89:2d:01:ae:
3f:10:22:89:00:03:fc:92:0f:77:04:ce:87:16:75:
68:62:01:47:84:a1:16:db:5d:7e:bf:88:50:b3:0b:
33:b4:e2:02:4b:f3:83:97:88:41:e1:9c:a8:81:6e:
2d:1b:b5:d8:93:8a:76:d4:7c:4a:f1:cc:04:c5:5e:
96:ba:9a:8f:dc:25:23:e1:1c:0f:65:2d:77:fa:04:
00:ea:33:83:d2:68:3a:51:e7:00:5c:0d:91:f7:78:
cf:b5:dd:ef:3f:b5:a7:b0:11:42:62:75:99:75:de:
7d:ac:62:16:03:ee:49:67:ac:c9:e4:9e:1f:87:91:
80:dc:b5:74:6b:f6:48:ba:d1:9f:48:57:43:ee:77:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:0A:B8:13:F7:D8:71:21:2D:B0:5F:8D:19:15:FA:04:30:46:B0
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:44:6e:97:9b:89:c8:50:15:3b:3c:6b:d6:b8:ce:47:b8:56:
29:a3:ef:1a:0c:c7:97:13:46:d7:55:6a:8e:96:4e:c0:24:fc:
89:03:5f:f2:ec:37:0b:e6:bf:04:26:ee:f0:3e:01:1d:8f:4c:
82:5b:f1:eb:b1:2a:19:f4:c8:c2:7b:18:22:a0:e5:67:0e:80:
d0:47:2f:30:33:1a:37:8a:f7:27:41:28:44:f8:c2:8b:70:b9:
9b:87:fd:68:b0:03:c3:58:45:60:83:de:3d:67:b9:05:43:8c:
41:15:20:bd:c8:0d:ab:bc:1f:c9:c3:8b:d2:47:eb:8c:82:e4:
ea:5e:1f:cc:e1:05:5d:96:59:2b:fd:ba:16:c3:a8:7d:b5:83:
e8:f6:9b:79:f2:34:3d:d5:f8:c4:05:a1:ad:f2:3a:07:b2:25:
c3:5a:1e:a8:d8:b4:7a:4e:38:11:0a:51:cf:29:c0:87:dd:e2:
dd:7f:79:bd:84:12:a1:56:57:60:0d:ee:3a:07:98:6a:72:08:
e0:09:47:44:a1:ec:8e:13:e8:4f:3c:5f:6f:0e:5f:f1:b4:23:
1d:6e:43:da:3a:5a:68:78:a2:aa:86:ab:ca:33:aa:3f:4e:48:
4a:c8:ee:89:39:d8:ba:95:35:cd:fe:b6:61:00:9b:05:a9:dc:
c4:50:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:26 2025 by rpki-client