Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: LGkp1ZpQ1WXMA6w3teIP+zl0zVtUUm2Ym5HAj8mdNdA=
Subject key identifier: 87:12:69:45:AB:A3:80:45:0D:95:58:64:47:07:04:C0:10:84:0B:22
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 0198D4744C6B340B2615CA67C31C69E73E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 0905
Signing time: Sat 23 Aug 2025 01:04:08 +0000
Manifest this update: Sat 23 Aug 2025 01:04:08 +0000
Manifest next update: Sun 24 Aug 2025 01:04:08 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: 0Zw7jqoq4mLOcQ8DgOsTbxevvUkjSHKMb3S4N6RsBng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:4c:6b:34:0b:26:15:ca:67:c3:1c:69:e7:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Aug 23 01:04:08 2025 GMT
Not After : Aug 24 01:04:08 2025 GMT
Subject: CN=87126945aba380450d955864470704c010840b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:4d:6f:91:78:97:f7:06:a6:ec:ce:df:f2:
20:2f:1d:b9:3f:35:2f:1d:38:df:85:27:f5:51:97:
be:98:24:18:78:67:ed:d0:96:32:15:ab:05:fe:fb:
7b:6e:dc:91:e8:be:4b:cb:9c:52:fd:c1:d3:b4:1b:
2b:e5:02:9e:39:90:d8:42:60:06:78:05:03:cb:95:
b4:d8:a7:d7:94:54:0f:1e:13:61:53:37:79:0a:57:
65:ac:e8:24:76:b3:aa:40:a3:f3:ae:12:39:68:75:
04:e3:cf:27:64:8f:58:19:e1:35:47:54:6b:f8:40:
3b:88:d1:f3:69:89:74:05:1b:1e:86:e6:be:6b:da:
18:91:50:ae:aa:73:0b:b7:80:55:58:a0:43:17:3b:
39:40:6a:30:9c:2b:8c:6a:2a:1c:23:68:76:b1:eb:
2c:4e:de:e8:25:ba:c3:80:49:51:b7:89:df:e9:dc:
d8:43:38:0d:0f:79:fb:c0:44:3d:3a:f7:0f:39:a9:
68:af:01:71:ac:e4:39:31:14:30:a9:08:39:1c:38:
88:cc:1f:b8:2b:ed:c4:11:dd:42:be:16:44:0f:ee:
e4:c9:2a:73:ae:55:b2:4e:e7:a3:50:76:f0:3c:90:
8e:9c:0d:bb:ef:e3:22:cf:cd:6f:13:1d:9f:70:82:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:69:45:AB:A3:80:45:0D:95:58:64:47:07:04:C0:10:84:0B:22
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:17:fc:b4:78:90:a3:19:dd:89:15:0b:a5:42:81:28:6c:5f:
b5:a0:90:c5:56:c9:60:4e:38:a4:1d:4c:ad:a1:df:40:8b:8e:
3c:e8:6d:ac:60:de:aa:72:0e:59:b5:66:45:1e:74:77:b9:31:
ad:df:77:4a:82:34:56:9b:9b:6c:9a:9e:b6:87:e0:aa:8f:8f:
ab:95:ee:40:47:fb:94:aa:b0:df:fd:47:1f:6e:85:bf:2b:e0:
da:8b:3b:5b:b9:27:20:d9:88:e9:17:06:9a:f2:c3:fc:90:45:
d0:ad:b4:70:cd:9f:8a:43:5e:8b:c6:11:d3:4d:a9:a2:b5:a1:
b8:38:6a:c0:03:1b:c4:51:45:b4:57:d6:14:1d:f4:e7:45:43:
27:a2:01:69:8e:cd:ac:13:2b:cc:43:fc:ac:fa:47:33:69:d8:
f5:44:d9:53:3b:c1:c9:3c:29:9b:11:43:bc:ee:e0:fc:37:65:
91:2c:c6:a5:df:6b:12:84:ad:68:5e:22:81:0b:18:1e:2d:85:
cc:0f:ff:ae:f8:f7:3a:c3:d2:ff:d7:0d:8f:44:6e:d6:60:fd:
09:d3:68:cf:c5:eb:d4:52:73:b3:19:9e:e3:e1:4d:05:2f:1c:
df:8d:c4:38:e8:af:fc:b9:73:53:4b:78:a2:e7:0e:94:f2:0a:
14:1b:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:55 2025 by rpki-client