Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: BRgPPkXSYCBsbgQ65GmRAz8d2AB+k/eQOMjOs1Oa11k=
Subject key identifier: FA:27:FF:41:7B:4F:38:5B:AB:C1:8B:F8:9B:F7:89:08:E4:B5:F5:FE
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 0198D4DFEF03E3C664CB5CEA2E0AA81EBADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: rtP2dk/+7GCVBfpoySTqwiu6aFpPRN2NmV3eQEteVwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ef:03:e3:c6:64:cb:5c:ea:2e:0a:a8:1e:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=fa27ff417b4f385babc18bf89bf78908e4b5f5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:6f:90:4c:fe:ba:2a:b8:b5:27:94:df:0b:
1a:38:80:c0:e4:7c:2e:fa:b7:ca:35:31:b7:7a:da:
f6:fd:c9:94:fd:1b:2e:89:f9:d5:c1:5e:d7:a7:70:
9e:c5:73:81:5e:9d:2c:47:f2:93:b6:c2:3a:a1:6c:
0d:4f:df:b3:90:09:61:47:ab:e5:a1:0c:53:66:61:
4c:fa:a9:4c:55:7d:25:e9:e1:5c:73:7f:ad:fd:2f:
1c:14:86:45:ed:69:3b:55:e0:bc:4d:ab:1b:83:c2:
c5:43:ca:ba:86:b8:90:36:e3:45:97:12:9c:eb:4d:
99:c2:e8:39:a5:25:38:65:e7:fa:1f:59:66:c9:fe:
1e:d0:c7:de:ab:a1:61:7e:25:60:db:62:01:9f:59:
01:fb:ea:60:6b:d9:cd:8b:28:67:0d:2e:ee:fd:d8:
07:0f:63:79:ec:aa:87:44:47:c3:d4:cb:4b:a9:f5:
db:1b:06:fe:7c:d8:1b:7e:68:d6:ec:db:b5:98:95:
a7:96:1c:7e:0d:83:2a:08:c2:ff:12:92:93:8c:d6:
f4:58:33:81:83:25:f3:c3:9b:a3:f4:ec:dc:28:c0:
08:4f:06:79:8e:eb:b9:e2:03:6d:53:80:98:ca:da:
3a:4e:ab:5b:9e:0c:23:b9:5d:d1:f0:13:a4:1b:b3:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:FF:41:7B:4F:38:5B:AB:C1:8B:F8:9B:F7:89:08:E4:B5:F5:FE
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:17:b9:a6:82:e4:0e:59:28:e8:c3:0e:12:76:77:47:88:dd:
11:61:97:16:6f:62:d8:7c:78:73:b1:84:fd:30:e0:0f:3c:a6:
be:7a:8b:47:84:02:1e:c9:32:bb:fb:91:81:65:a2:fb:c4:0a:
eb:ed:ec:1f:f5:be:aa:b5:0d:a0:7e:da:7c:1e:49:9a:86:c4:
80:3e:8d:4e:2e:c8:6c:48:a4:30:49:b1:0c:09:ca:6c:33:e1:
c0:a6:bd:8c:d0:d0:57:2f:ce:d7:49:c2:08:2b:51:63:f6:7a:
c6:ca:0e:51:da:f6:e5:3d:1b:2a:32:54:d7:8c:ef:12:35:83:
f8:1d:78:36:b8:62:bd:27:1e:15:8f:6d:d2:48:11:35:ea:4a:
03:d7:10:06:f3:ba:4c:3a:88:e0:44:53:7a:17:e1:c6:ff:fe:
be:4c:4b:cd:de:25:61:b1:95:f1:d8:26:4b:6d:17:33:f8:79:
5a:b8:f7:49:e1:33:79:54:9e:d1:3e:01:ec:3b:b4:dc:ac:ec:
9f:14:08:03:8f:9d:e1:b8:65:69:55:98:50:86:a0:e6:01:d2:
be:d8:63:56:ef:58:b5:9e:45:84:33:be:86:79:a7:13:0d:5a:
cf:31:0a:fa:66:bf:40:52:4b:01:6c:00:19:22:18:f7:09:a0:
17:89:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:25 2025 by rpki-client