Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: HiYoJ4BU9XnOuGISqxkrdeB7rnz9nquDfzCiruFTrqg=
Subject key identifier: B9:2F:26:C0:98:95:4B:42:CA:0F:21:94:EC:61:D6:8F:0B:40:77:A8
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 0198D47453918F1D80A231604942532040BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0C2D
Signing time: Sat 23 Aug 2025 01:04:09 +0000
Manifest this update: Sat 23 Aug 2025 01:04:09 +0000
Manifest next update: Sun 24 Aug 2025 01:04:09 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: F5G/0559Xr2obu/G2IENDFP397Yd+zVx5mocgqZJMxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:53:91:8f:1d:80:a2:31:60:49:42:53:20:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Aug 23 01:04:09 2025 GMT
Not After : Aug 24 01:04:09 2025 GMT
Subject: CN=b92f26c098954b42ca0f2194ec61d68f0b4077a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:d9:ae:57:03:81:ca:4b:a6:df:95:f4:7a:
1d:17:cc:90:73:0a:be:1b:db:e5:52:78:96:34:74:
35:c8:c7:bc:0d:8f:f5:97:41:64:a8:97:5d:48:f9:
e0:5a:4b:57:7e:fe:67:95:ee:5c:60:af:f7:37:0e:
8e:97:d3:77:15:80:82:27:36:ca:e2:6e:14:27:53:
e6:ac:c4:46:48:7b:bb:33:02:3b:c1:5f:ce:95:5d:
f1:8a:4e:02:b8:fe:a4:86:a1:16:af:8f:f3:15:ee:
ee:51:48:a0:7d:be:59:ba:31:49:0d:db:0a:93:fa:
4a:e8:cc:b9:91:22:a6:36:ae:11:bc:4b:22:57:23:
03:4c:ae:73:a5:9c:2d:8e:b6:43:26:13:17:8d:4c:
ec:db:da:23:78:9b:02:d1:83:d1:e4:f6:9c:c9:1c:
57:59:b3:85:3d:0f:1c:ec:8c:fe:80:b2:fd:28:9d:
4e:71:5e:54:8f:38:42:37:b3:e5:4e:53:39:f5:1e:
eb:22:53:2f:df:4e:1e:94:96:e0:1b:4d:c8:4f:82:
05:34:52:81:70:4a:8d:3e:a2:a1:c4:0d:5a:7f:0c:
09:eb:44:b4:b1:1a:84:83:2d:90:9b:dc:d4:15:be:
8d:3c:f2:56:4c:6f:55:de:f3:7a:46:2d:6d:16:cc:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:26:C0:98:95:4B:42:CA:0F:21:94:EC:61:D6:8F:0B:40:77:A8
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:97:75:ae:f3:44:af:e1:d9:3f:35:5f:e0:6a:45:16:a2:
2c:fc:a6:25:d4:9d:94:b8:27:35:82:cd:90:34:09:be:45:f0:
77:52:48:01:d6:95:24:0e:1e:db:f9:3b:11:10:86:06:fd:4a:
60:24:57:95:05:ef:07:ff:8a:ba:45:7c:55:13:29:f0:6b:a4:
5a:6d:d8:8c:39:ae:b0:f4:fd:8b:18:38:4e:e6:90:83:2b:0b:
11:e6:f3:69:c9:d5:ef:ec:90:cd:de:35:33:ee:1b:20:a3:ad:
be:c5:8f:de:8b:9a:f3:5e:4e:0e:11:e4:12:40:d2:b7:14:2e:
11:67:5b:6a:05:e9:d6:c9:52:eb:fb:c7:91:f9:24:7d:12:e4:
ff:9d:06:fa:1a:2f:6f:45:1f:5c:97:c3:0a:c5:ac:e0:a5:67:
e6:0d:62:c7:76:49:93:e6:d4:51:24:46:a3:3c:ea:97:81:57:
f3:da:b4:e9:d5:b5:1f:2c:24:e5:6f:69:13:84:91:fe:3a:8f:
d8:de:87:54:c7:56:5a:b5:14:5b:ea:67:51:11:da:69:b8:52:
c2:9f:4a:39:98:db:11:d6:99:47:47:b2:c2:0d:05:72:1d:43:
0c:54:f9:db:76:2b:47:d9:64:45:0f:f5:8f:02:a5:3d:70:95:
a3:2f:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:56 2025 by rpki-client