Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: Xf8mbkZzk8LEP35XZHASqBToDratB3DUpQNlMvO+o6g=
Subject key identifier: BA:09:05:AC:63:AE:D4:76:7A:D9:F9:B6:96:D7:BB:F0:2D:CE:B6:E7
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 0198D58370C7809FE89F4A65D466EFCA4212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: D0
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: RMxoO6Wf0ffFTX+y39fIkMbnavIOolFDRgh2UWgPpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:70:c7:80:9f:e8:9f:4a:65:d4:66:ef:ca:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=ba0905ac63aed4767ad9f9b696d7bbf02dceb6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:9e:2e:05:96:7f:79:a4:95:53:d4:55:23:
63:e7:d7:bf:88:f9:65:a7:af:f3:b3:18:7a:c8:e7:
e3:2f:4a:49:79:43:09:1a:48:7e:4d:7c:be:c2:6b:
31:d5:91:12:94:7b:2d:8a:db:3f:16:e3:3e:94:ab:
2c:71:de:b4:e7:7a:90:a8:b4:8a:29:15:e4:55:b7:
5f:ff:62:95:bf:82:ea:21:e1:2d:1f:09:02:8b:ea:
12:36:4e:9b:57:26:51:8f:fa:d3:a9:c7:ec:a5:ba:
d8:ed:ad:d3:01:21:90:a3:e2:c4:03:e8:86:53:65:
9b:28:df:6e:31:1e:69:65:6a:9d:5e:db:f6:9e:16:
24:0c:a4:95:24:ee:78:a9:7b:2b:e7:c0:c8:f8:69:
46:5b:f4:e1:a8:bf:04:1a:2e:41:d0:db:55:b2:19:
b6:b0:d7:8a:e1:55:71:21:5a:44:5b:ff:88:6b:06:
cc:c0:5d:2f:dd:0a:ea:1b:ac:9a:f3:41:51:b6:5c:
a6:f3:a0:ea:18:31:7b:5e:a3:e9:3d:c3:b4:8c:a2:
ee:31:a5:62:79:5a:87:78:a5:6d:6f:e9:11:54:09:
e7:b3:34:fb:50:88:09:15:2a:ae:3b:af:63:d0:70:
c5:0c:89:ac:ef:b4:7e:9d:35:04:a9:51:7f:0d:a8:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:09:05:AC:63:AE:D4:76:7A:D9:F9:B6:96:D7:BB:F0:2D:CE:B6:E7
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:32:4f:ce:56:a7:54:17:43:09:58:ca:5f:7e:f4:9e:22:6f:
91:f9:5c:c3:9e:7e:50:a8:e8:aa:a6:2c:8b:f2:86:ee:0e:88:
b7:3f:4c:84:84:be:54:27:6c:a1:be:8e:e0:82:10:32:75:6a:
26:81:7a:f2:d3:bf:a1:c8:5d:5f:be:22:0f:4f:a5:f7:42:4d:
a4:1e:3c:35:e2:25:3d:fd:9c:91:e5:2c:fd:0b:5c:e2:28:c4:
e6:6f:e0:55:f5:be:79:71:da:87:45:2c:63:45:47:03:bd:78:
04:92:b0:16:83:4b:20:f6:fa:6d:1f:e7:00:d2:ff:23:06:a2:
11:18:b3:83:a8:12:59:f3:4f:8e:3b:8c:b2:04:b0:b7:22:a4:
7b:cf:8a:36:55:e7:c1:e6:75:9f:d4:9c:22:49:59:d7:40:0e:
2c:b2:f1:6c:b8:e5:32:21:5a:81:f8:fd:0b:dd:67:a3:e0:e1:
43:33:b8:60:a7:97:96:8e:56:c3:90:67:e5:ef:df:d6:ef:b5:
02:d7:b1:25:60:48:41:1b:10:76:b9:61:71:44:77:f4:3a:d0:
c1:de:41:21:7f:62:0b:b1:80:f2:e8:3a:2a:35:26:ac:5a:50:
14:8c:e7:26:4a:3a:22:77:a4:5a:cd:26:ba:75:1c:c7:a9:48:
2a:98:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:38 2025 by rpki-client