Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: Qhgyi67eak4W6UPrRTYxgpJJCUvZ0K5iMd8nAfatK6w=
Subject key identifier: F0:50:80:8D:FE:C3:2B:14:88:77:C0:A5:08:59:C8:F1:21:78:21:EF
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 0198D5F133195159E94E471ACF69B661085E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 13B7
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: 3/PYf1BBuG8T5yVL8uoMzcdTgAGYX9AipLNMh9BZ74c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:33:19:51:59:e9:4e:47:1a:cf:69:b6:61:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=f050808dfec32b148877c0a50859c8f1217821ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:fe:40:67:3b:2b:e7:3a:42:c0:8a:58:24:
17:93:bb:ef:7b:7a:96:c7:ab:88:b6:7c:a7:a1:c1:
c5:dc:08:5a:3d:28:00:62:1c:4a:a0:49:df:13:34:
1e:56:bf:d3:32:59:31:3a:37:5a:4d:d2:1c:cc:29:
4d:a6:9e:bf:1a:e3:3a:cc:a6:2a:3b:76:6d:ad:ff:
05:63:33:98:37:8e:81:b7:c8:e6:78:33:bd:33:9c:
7a:58:55:7b:12:66:72:8e:12:89:dc:22:75:b6:fb:
7c:9d:24:10:6e:ea:69:8a:c5:df:b9:cd:c6:05:c3:
4c:9f:7f:fa:55:70:4d:38:05:6a:d0:3e:52:cd:1c:
75:7d:21:8c:b9:35:8e:64:f3:68:b1:13:13:d8:60:
07:3f:3a:2f:f9:9f:e6:b2:1a:17:79:a7:23:0e:b6:
02:f4:61:79:26:af:d8:03:be:d0:eb:bd:50:27:d4:
80:00:56:88:71:1f:ac:52:1d:67:8f:f6:78:fd:55:
40:7c:86:d6:de:60:69:f8:f8:7c:f8:bb:1e:3a:07:
06:1d:b7:63:5b:73:09:90:fd:04:32:54:0d:f4:c2:
45:a2:43:8e:f3:9c:da:b0:67:c1:f3:96:de:8a:92:
a3:82:b2:76:78:8b:d8:01:7c:e6:ac:a3:13:d9:04:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:80:8D:FE:C3:2B:14:88:77:C0:A5:08:59:C8:F1:21:78:21:EF
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f1:1f:97:e1:b6:3a:19:e0:29:e0:9b:06:53:35:9e:96:78:
40:c8:ce:91:d4:3b:f5:4a:ae:49:56:40:6f:cc:9d:15:1b:00:
a7:49:38:0c:16:fc:f8:69:d9:ce:f5:44:59:c0:90:2a:9b:97:
ef:c3:2a:5f:c2:e2:90:99:6c:14:3e:bc:9d:a1:d2:32:5b:76:
a2:72:aa:74:ce:54:4e:e0:65:90:f0:c9:8e:ca:3f:ab:f0:b7:
b9:12:b4:19:29:00:4e:2d:e4:e0:bc:53:fe:22:e7:9e:75:f5:
54:9d:b0:f1:8e:7e:24:8d:fc:4f:af:a1:49:74:27:a1:93:d7:
13:97:18:0e:5a:da:27:7f:b6:46:a6:ab:99:57:67:51:11:07:
d7:72:59:4f:e2:3f:ff:c4:6a:c2:8b:14:b8:e4:35:b3:10:8c:
3b:61:2a:d5:40:8a:55:d0:8f:2a:a9:5f:d7:ad:01:59:f0:fb:
65:42:5f:9f:b8:e7:e8:8f:e1:f2:94:25:e6:b1:00:35:e4:81:
f4:12:bd:cf:f2:87:88:8e:51:a7:53:7c:9f:33:c4:17:47:1e:
fd:c7:71:da:3f:5a:cd:f7:4b:1d:d8:ac:15:02:25:2a:1b:7c:
e4:e2:eb:84:30:50:f5:04:10:28:af:49:aa:04:cf:a6:92:f6:
c3:24:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:02 2025 by rpki-client