Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: cukRBojBqf0Ysb9Lg7eqxHuaHul7G7BHU407PA8QShI=
Subject key identifier: 98:05:71:47:E8:A1:6F:4E:BA:1A:2D:7A:72:C6:96:08:03:AE:9A:E1
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 0198D773A79DB63062F8CEF2112BECE84AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 0333
Signing time: Sat 23 Aug 2025 15:02:17 +0000
Manifest this update: Sat 23 Aug 2025 15:02:17 +0000
Manifest next update: Sun 24 Aug 2025 15:02:17 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: BmPaMxFweZb/PfC0txGvl50BemswATNTZ4/gPje808M=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a7:9d:b6:30:62:f8:ce:f2:11:2b:ec:e8:4a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Aug 23 15:02:17 2025 GMT
Not After : Aug 24 15:02:17 2025 GMT
Subject: CN=98057147e8a16f4eba1a2d7a72c6960803ae9ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:18:ae:58:fa:fd:bf:10:59:61:9e:b6:41:
ec:73:f8:5c:b0:b1:fa:d6:b3:0d:d6:ca:c0:d4:14:
bf:25:99:a6:84:97:27:9e:9f:d7:ab:3f:44:53:4d:
be:1a:69:6c:d3:50:b3:c9:16:6a:f2:aa:3d:ed:a6:
20:68:b5:f4:20:60:6e:e0:3b:12:76:5f:53:c8:84:
27:5c:c9:66:50:06:2d:c8:2f:21:8b:38:96:9d:a1:
21:98:0f:c9:bb:c6:20:28:85:88:33:9e:37:92:bc:
ab:ab:cd:ea:f7:3c:c5:49:c0:8e:c2:17:03:6b:a6:
78:6d:92:5a:d0:54:2c:df:c9:32:9f:68:40:d4:e1:
71:e0:65:c9:c7:68:a6:6d:68:67:9b:3f:de:39:08:
62:2c:f8:6a:1d:5d:3e:05:e5:f3:a9:69:bb:3e:38:
24:7c:3e:cc:3c:3d:37:84:77:cb:7e:68:86:2a:6e:
dd:55:4c:8a:db:fb:54:d8:39:6c:29:68:ab:2b:a4:
b6:4f:1a:e6:81:6e:70:e1:25:6f:28:e3:98:3f:b5:
f1:6a:13:a2:f2:88:77:dc:5c:a1:dc:43:42:b1:d3:
79:fa:51:be:98:01:c7:9f:97:6e:fb:f0:0f:41:93:
b7:98:9f:1d:a7:c5:9a:14:da:df:72:82:67:6b:96:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:71:47:E8:A1:6F:4E:BA:1A:2D:7A:72:C6:96:08:03:AE:9A:E1
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4b:2a:a1:9f:10:e0:45:02:2c:43:d0:bc:e6:55:a2:27:8a:
c1:45:99:a7:cb:f0:4f:0b:09:be:b2:2e:4e:52:bf:a9:22:7e:
a7:9a:8c:e3:50:f2:1c:ea:97:38:71:ef:5f:d4:c9:5c:ca:69:
38:09:1f:27:e5:3e:98:f5:85:18:f3:2b:44:7d:10:a1:14:40:
2e:f6:7f:96:50:82:a8:d0:63:a3:65:bf:f5:2c:24:f6:55:0d:
15:b5:1a:02:78:e6:f2:e6:dc:2c:93:52:ff:b9:d3:04:b1:f5:
8e:ad:f0:1f:76:62:d8:74:d9:7c:8c:f9:0d:16:1a:06:86:f3:
c4:0e:bb:1b:8a:1c:c0:db:43:d7:51:e7:42:3b:e4:2d:39:ee:
01:4e:99:fc:eb:93:2e:d2:7c:d9:2b:e9:bb:11:f3:03:ae:a7:
35:36:76:74:3b:a7:14:11:0b:c4:fb:6d:2e:f1:7b:e4:e5:56:
7d:8a:fa:d6:37:df:1f:c9:00:0a:85:cd:74:27:01:26:8b:ff:
2f:c0:19:42:69:fa:de:7b:f0:ce:a5:d8:17:56:2a:75:69:35:
58:7a:e0:b4:3d:d2:95:9f:c1:8b:bd:a1:9e:15:b3:50:51:81:
72:99:22:02:a2:4a:40:c9:9a:53:ce:71:dd:f8:86:00:4a:00:
19:ab:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:28 2025 by rpki-client