Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: yQEy97sczBK0aOWQNdUgLlsP1i/RbC0M305H7dl8PIc=
Subject key identifier: 90:5E:81:BC:F4:60:22:84:05:EA:8F:9D:CD:8D:74:07:12:20:8A:F6
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0198D4DFD3A3A136B7063A5B61691439E307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 04C6
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: 1K9DOL5YRJMGiM/bHLVupaY1THDygoRkkddMWV+kSFg=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d3:a3:a1:36:b7:06:3a:5b:61:69:14:39:e3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=905e81bcf460228405ea8f9dcd8d740712208af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:fb:b9:65:95:a1:80:d3:83:36:44:f1:d2:
13:57:b0:51:da:ff:28:6d:16:95:34:70:7a:ad:c9:
bc:b6:ce:2e:de:74:43:8a:7a:05:65:fe:d5:ff:cc:
1a:47:f3:c8:69:8c:61:17:08:95:40:f6:c8:56:b5:
21:ab:65:53:44:bf:7c:47:e5:16:65:bb:d0:cf:1f:
2a:3a:79:2c:a7:e8:22:20:7a:ac:a8:6a:f2:60:24:
85:d2:1b:ae:e0:9f:7f:35:44:01:3b:86:18:1e:b0:
8a:4e:a6:2f:1b:b2:ff:6b:a8:c0:bb:57:8a:9b:4a:
15:ba:76:93:40:d6:d9:35:ee:40:80:53:62:51:3a:
c2:ad:f2:f5:60:0c:8e:57:6d:12:0c:12:f1:6c:c3:
48:1b:d3:08:d8:63:a5:0c:30:06:a8:e2:1d:ff:13:
c6:3e:60:d2:e8:75:23:59:fb:6b:6d:1d:57:9e:c7:
c4:13:d5:90:da:ac:68:c3:f8:d0:8f:aa:bd:23:97:
b7:c0:fa:b0:5e:e5:a3:b7:ba:2f:b3:7a:1f:2d:28:
7d:37:f9:dc:a6:02:2f:1d:c3:d6:be:c4:5a:ec:87:
43:28:66:72:92:7c:a7:93:06:77:9a:c7:85:c0:1f:
28:7a:fb:3c:67:2f:bf:24:da:b1:e2:f0:87:52:09:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:81:BC:F4:60:22:84:05:EA:8F:9D:CD:8D:74:07:12:20:8A:F6
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:56:1d:61:3f:95:a8:23:47:ab:3e:1f:ff:bc:9e:9d:5b:95:
38:d3:c4:e0:be:6c:25:68:1a:d6:1c:4f:9c:f6:dc:64:97:a0:
2a:55:24:d8:5d:56:fb:4a:66:d2:da:3f:10:0d:63:4c:ab:46:
aa:5e:ef:8f:f6:96:e7:e4:df:c5:ff:eb:46:bb:a6:93:94:7a:
e4:c7:74:02:b8:bd:a1:db:77:c2:81:ca:0e:1f:7d:37:cd:73:
64:bd:c3:53:d5:aa:4f:9c:e8:61:62:41:00:a2:92:4e:d8:ab:
05:17:c7:75:0c:be:84:0f:03:12:bd:d1:08:a1:f2:e1:59:ea:
4b:b3:21:04:a6:f3:ae:cb:e6:3a:9e:56:f7:f1:cc:8b:35:00:
18:ef:bc:6b:43:d0:5a:56:b9:40:ae:a4:97:bc:8e:f7:23:5f:
51:d8:8d:a8:93:3a:58:92:14:c1:15:42:44:a6:2a:7d:1f:bb:
44:57:e9:b7:c4:34:80:1d:1e:60:e6:f6:c3:5a:42:df:32:8c:
16:9b:4a:88:91:a4:bd:77:0b:f5:19:d9:e7:b3:c5:9b:da:53:
91:43:3e:dc:2d:0b:71:5d:4a:d0:bc:be:a4:ca:7a:89:d8:9d:
18:50:bd:c8:f1:51:5b:e3:8a:ee:e8:c5:90:fe:d7:13:bf:2d:
85:c0:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:42 2025 by rpki-client