Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: C4JF6YsJcdWoSQjSanA6I30GrV5RCLzjJewFpkDU1P0=
Subject key identifier: 88:26:0C:FD:C5:C4:9B:40:45:BD:7B:56:72:55:71:C6:F7:9F:88:C9
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 0198D65FDC84B6ADFC124D97621E7EBFF95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1548
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: /l0PTQSTwJUDG30o/PxtfSsgxMl8SKMGWmeslrL74xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:dc:84:b6:ad:fc:12:4d:97:62:1e:7e:bf:f9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=88260cfdc5c49b4045bd7b56725571c6f79f88c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:e4:09:8e:44:b9:31:3c:50:93:ec:64:bd:
ec:48:49:aa:95:62:35:3a:07:ab:d0:e1:b3:44:b7:
39:68:e9:32:6a:88:55:99:24:73:f1:2b:f4:77:16:
b2:ad:64:90:bd:50:d6:fa:82:5e:2e:54:11:1d:6b:
9f:6c:e3:e0:7a:4c:b8:c1:c0:30:c7:da:47:3c:b3:
53:12:9e:b1:ec:64:33:b7:75:de:98:23:19:cd:db:
1b:53:72:43:86:34:18:82:89:0c:de:c4:17:43:eb:
a5:6a:ed:ab:1b:61:7e:dc:b1:c7:6a:0b:4a:39:ea:
55:8d:90:8f:af:a5:dc:79:40:0b:5a:f3:39:59:ff:
e8:20:21:9d:3a:7f:b8:a7:ac:26:83:7c:fc:a5:d5:
ac:a5:83:41:ef:2e:a6:02:d8:00:ad:12:20:8d:be:
1c:28:4b:81:cb:e9:63:b2:26:eb:aa:e0:1f:a0:fb:
6d:68:f6:85:ca:3d:96:bd:d1:29:a7:d1:97:e2:2f:
24:7c:10:0f:2d:d1:15:62:4d:96:0d:89:e7:0c:38:
e1:17:7f:db:ed:5e:67:88:ec:34:3d:e3:a1:a8:5f:
4c:b5:e4:91:08:f1:45:6c:89:66:d1:47:83:fe:a1:
ef:a9:a3:95:2b:63:e7:ec:db:04:47:61:06:1f:d6:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:26:0C:FD:C5:C4:9B:40:45:BD:7B:56:72:55:71:C6:F7:9F:88:C9
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:37:8e:6f:0d:91:7d:34:8d:b6:6a:81:b5:68:8d:3b:f1:94:
bc:db:61:4c:8a:66:13:12:cb:de:0c:68:17:e5:14:eb:1c:73:
1d:20:e8:c6:44:a0:8b:06:43:44:9a:5d:e6:ac:cd:38:a1:de:
2b:2c:b4:01:59:dd:a4:da:62:f5:7a:4e:3e:f3:4c:b0:05:ca:
d3:9f:ba:e5:d3:8b:d2:0e:08:32:6d:16:d2:ef:87:33:c9:50:
73:8a:77:ce:2a:5f:e6:22:13:ab:83:24:7d:5e:e1:b7:4e:51:
ae:33:47:ca:45:8d:d0:3c:e9:09:88:fc:cd:75:86:5f:b1:74:
30:61:d6:f4:ae:18:b0:8d:e8:d3:3e:be:94:c1:5d:9a:ee:aa:
ff:e1:5c:f5:2d:7d:43:66:43:7c:6b:2b:74:93:41:05:ad:38:
61:c9:de:b6:e4:12:9c:77:83:46:d3:4a:2e:da:62:2e:70:67:
d1:64:97:f3:27:3d:53:6d:15:45:23:79:17:a6:23:ca:c1:d8:
17:ed:f8:01:8f:3f:33:c2:98:f6:cd:5d:0f:7b:41:bf:4f:16:
22:4c:17:8f:99:82:b9:17:1a:1f:7a:f4:b1:e7:96:22:77:91:
42:01:9f:0a:72:db:86:9f:a3:22:f3:50:ec:9b:60:0b:30:25:
4f:ee:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:11 2025 by rpki-client