Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: j7e7uBtdGdgmnOjW2andGjC15FuJ4OObDnM3G4fyltQ=
Subject key identifier: 72:30:50:9E:45:63:CB:3A:C2:61:5B:DB:66:A8:12:C9:3E:95:A0:5F
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 0198D65F7521E553C6B7C454B446EEC88A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 07FB
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (hash: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=)
2: auh7CDhWY48lyi05uSGvAmCeUEY.roa (hash: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=)
3: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: YSm2qTK56FXnDbSS/BEtn/QD5/ryHO0XTIcUkOY9xTM=)
4: nz0zNU_fBq73BHptpznw6advDzo.roa (hash: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:75:21:e5:53:c6:b7:c4:54:b4:46:ee:c8:8a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=7230509e4563cb3ac2615bdb66a812c93e95a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:90:f0:d0:1f:a3:17:ad:6f:a1:15:ba:19:
55:cd:7a:09:e0:8e:4e:4e:6a:9d:6c:7a:bd:ac:dd:
8c:f3:84:13:df:79:73:62:92:24:04:3a:28:f3:02:
78:56:e4:26:c0:5b:a2:57:48:8b:b3:08:c4:9e:7c:
60:8e:fa:55:e1:63:e5:fd:8e:ff:06:a9:9c:31:f5:
2b:4e:ea:1c:2f:55:9e:ba:4c:ad:ea:bf:d9:64:ec:
47:91:75:40:a2:39:b1:15:f7:ae:44:7c:8a:18:e7:
78:a5:fe:6c:a7:ce:f3:b4:25:cc:d7:e4:ca:80:61:
d8:d6:b7:77:da:c7:3e:3c:56:e4:5d:45:76:ec:4f:
c1:cc:d8:9a:73:f1:e0:e6:6d:a2:ff:0b:ad:93:26:
4b:68:fe:21:19:6e:66:4d:47:fa:17:7f:4b:ff:ac:
b1:5a:63:fb:c1:3a:cc:2f:fb:40:82:2e:54:d0:d0:
92:a9:7c:ab:ae:a9:56:27:e8:f7:72:3e:6b:f3:0d:
c9:69:90:d1:71:11:80:83:0f:a4:6d:d4:0d:6d:f4:
60:2b:f7:82:36:c9:48:fd:93:a9:de:50:66:31:d8:
a6:59:1a:8c:20:50:0c:cf:ac:6e:b8:58:cc:cc:bd:
87:e1:66:e2:9f:79:00:80:8b:97:59:08:5c:12:01:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:50:9E:45:63:CB:3A:C2:61:5B:DB:66:A8:12:C9:3E:95:A0:5F
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:44:55:0d:05:1e:3e:42:1e:0f:11:03:39:e6:98:be:da:1a:
f0:8b:6e:55:57:0d:63:f1:3a:ba:27:a1:0a:c5:5a:57:a5:4d:
b4:8b:2c:07:80:f7:f3:9e:7c:53:33:2f:cd:8b:f4:cc:36:29:
ab:78:bb:ab:db:84:a5:83:9b:4f:bd:cd:33:02:35:99:40:e0:
70:54:1b:51:8d:d6:72:b4:22:ca:f8:25:e9:1d:83:be:28:dc:
14:2f:ca:23:d8:c1:a5:c9:de:13:0f:6e:c8:a2:63:db:0c:f7:
2d:a9:5f:0c:02:4b:d7:d7:13:13:e0:52:47:b3:7c:da:4f:0d:
fe:eb:e8:ae:1d:e2:85:9b:73:8c:fa:c0:0f:0f:9a:ae:69:b4:
d8:47:8f:60:c7:8d:02:e6:a1:21:02:c6:c5:25:3b:da:ce:b6:
a9:c4:1b:a8:60:32:a9:ec:6a:0d:67:b1:58:c5:fb:7e:64:d9:
0a:89:fa:bb:46:62:8b:db:7b:01:eb:54:89:bc:40:ad:30:f2:
ff:25:6b:4b:4d:bf:87:d1:b4:5c:4d:96:61:29:1a:3f:d4:35:
d0:e1:46:0a:45:d7:ed:ed:07:6f:f7:4c:d3:b9:15:b7:db:9e:
63:90:d0:24:82:4c:d0:ba:f8:94:09:5c:1b:20:e0:32:ce:c9:
bb:b8:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:14 2025 by rpki-client