Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: 4Yhh1vp2Xn94/v5BnyR4dWOgPukODqoNoQaAm8z+pAM=
Subject key identifier: 45:7F:A2:E4:32:F2:3A:E4:64:72:F4:3A:5D:48:1D:24:F9:D6:92:EB
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 0198D5BBEB275EFC499C424FD4C1633CD185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0AF2
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: pLmyu30zab/J/u6+m5DibenJtaeZsGI530CgBt7Nixw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:eb:27:5e:fc:49:9c:42:4f:d4:c1:63:3c:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=457fa2e432f23ae46472f43a5d481d24f9d692eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:b3:b0:b5:e0:2b:ca:88:97:de:16:cc:68:
ee:8c:75:8e:40:f6:4d:bb:9b:1a:c9:4b:9e:32:9e:
c2:13:14:da:d3:bd:68:29:0e:91:e9:4c:76:2a:c1:
21:4d:73:e8:b8:b7:52:c1:2c:e7:d3:30:3a:8e:ea:
aa:08:f5:d4:02:97:dc:3c:01:76:9c:8e:7d:bb:8f:
e6:87:0c:5f:be:03:ea:62:8c:8c:ed:bb:8f:d3:ce:
0b:73:a8:6b:70:56:ca:00:e9:19:07:fb:45:4a:9a:
2c:58:04:83:fc:b7:18:9f:b0:e2:a0:41:f1:c3:c4:
59:bc:13:1f:e5:98:37:b3:a3:a3:4c:d7:3a:e3:02:
bb:b4:d8:70:7a:c1:6d:3f:66:1c:99:36:71:c5:43:
60:52:fa:13:2f:d9:f8:8d:ca:34:d1:5e:02:02:86:
3c:72:c6:f5:09:7c:3d:9a:e5:43:b4:5b:77:3a:aa:
71:73:e9:03:57:4a:07:84:a5:ce:84:13:7d:b4:59:
06:dd:7b:5b:2e:9b:5e:51:ac:73:97:1d:72:fa:10:
10:36:8b:15:e4:fe:32:09:2f:72:94:63:5d:1e:8b:
6f:75:8a:d9:2e:77:cb:89:79:e6:c7:17:c2:c4:55:
9e:4e:cd:1a:77:1c:6f:7d:42:c9:ca:b3:80:ad:a0:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:A2:E4:32:F2:3A:E4:64:72:F4:3A:5D:48:1D:24:F9:D6:92:EB
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:74:8c:0c:be:2c:3c:b3:a2:97:24:b4:f6:30:77:95:ff:4f:
a2:33:68:0f:78:fb:3c:dd:a8:de:17:6e:44:69:67:0e:27:75:
51:cc:d4:f1:49:ce:11:84:37:f0:a9:ea:18:6c:f6:43:66:6f:
6c:38:7e:b1:bd:ac:24:c9:3a:cf:29:98:dc:d1:7b:12:9e:de:
96:d6:d2:14:17:2a:14:e6:00:c0:52:c3:5f:16:ab:f7:f0:f3:
e9:a6:c7:01:01:16:e1:e0:2f:63:77:f9:ad:1b:7f:ef:49:dc:
7d:39:61:65:c8:1d:9a:a0:d4:5f:fe:68:ee:2e:e9:ef:e3:49:
9c:22:01:7b:15:41:60:73:bf:bc:22:4d:20:47:b9:8a:c7:a5:
a8:17:3d:45:ef:92:41:7a:35:35:cf:f6:1b:f6:23:da:76:f6:
3c:1f:b7:e3:e9:9b:cf:ed:a8:64:2b:82:c4:c2:58:35:90:7f:
24:27:d5:14:c1:b6:bf:30:3e:95:bf:97:ee:e3:3a:06:e1:92:
71:33:c2:fa:b4:44:b6:c9:48:70:aa:0f:dd:c1:68:e4:2a:7b:
67:a4:d3:b2:f3:2e:fb:e9:8d:6d:43:1b:37:65:21:ef:00:f1:
11:0f:25:fc:f8:16:d1:c8:07:0c:26:6d:01:f9:3e:44:45:df:
df:f3:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:23 2025 by rpki-client