Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: Yyky2NOvkcbr5edOAZz5fSxe03kzqS1nWWbwPvuCQXY=
Subject key identifier: C7:0F:CB:15:C1:BA:E4:CE:E0:33:66:8F:50:B5:61:38:7C:05:71:99
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 0198D5BBE0FF3A8C5006D74D1AA73FF92FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1270
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: IWh7U+6LoTqYNsXbguYADoTcV+tLT/w8W1DvcOOp/WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e0:ff:3a:8c:50:06:d7:4d:1a:a7:3f:f9:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=c70fcb15c1bae4cee033668f50b561387c057199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:05:89:9e:9b:2c:4f:b9:95:61:c9:ef:ea:
22:6a:60:3a:87:1f:51:88:ec:81:8e:d2:1a:ea:5a:
60:fc:1e:06:e2:a9:be:69:15:81:89:26:ce:1c:c1:
11:f1:06:c5:a0:08:ff:6d:c0:8d:8e:21:c2:3a:fc:
f1:3c:cb:e9:13:0b:42:d5:63:8a:19:5c:2d:a1:e9:
b1:78:90:f3:6f:f1:b9:79:3d:23:c7:ef:52:8c:95:
76:2b:8f:ae:23:f0:93:30:2a:8d:d1:15:21:ff:88:
db:29:36:d6:1a:d0:b0:d2:65:17:7e:eb:4e:36:e7:
54:c4:19:98:6d:b4:7a:a6:a2:74:3e:af:f4:3a:19:
79:ae:d9:da:a0:e6:7a:4d:89:3e:15:e0:29:17:90:
42:b5:76:e4:51:9f:be:77:0f:80:9c:ab:47:82:d6:
df:1d:e8:d9:73:53:29:9e:36:c5:cf:f7:5a:6f:45:
2e:79:87:d1:cb:d6:3f:7b:ff:bf:d0:ca:13:ae:79:
1b:19:47:52:17:e5:68:5f:d3:ba:23:e6:33:1f:d4:
9e:77:0e:bf:e3:ef:01:81:40:7f:9d:c5:f3:32:5b:
00:b1:1c:b6:29:f7:13:ad:b7:5d:0f:05:ff:8f:7d:
1e:3a:ba:80:0e:1a:21:4c:2b:40:2a:96:f0:cc:e3:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0F:CB:15:C1:BA:E4:CE:E0:33:66:8F:50:B5:61:38:7C:05:71:99
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:05:2a:0b:3b:7b:3d:3c:88:9c:50:20:6d:3a:10:8a:c4:
8a:d3:6a:c4:13:81:50:17:57:18:92:53:ce:9d:cc:82:c7:41:
74:c5:3f:08:4a:4b:2d:8d:2b:d5:c3:9a:c7:09:8a:7b:40:12:
6a:5c:5a:76:ea:6b:a4:5a:c8:df:d2:1f:bb:43:60:23:ea:77:
e0:70:2c:be:7e:0f:49:80:b5:0c:73:31:2d:03:38:12:48:1c:
5d:bb:aa:46:bc:8b:7e:a9:ba:6f:53:3a:ae:08:02:88:de:39:
24:7d:a5:13:65:9e:5a:56:49:e7:44:22:3a:11:d6:55:e9:d5:
2a:94:61:b3:63:a5:e5:37:db:95:9c:8a:b1:d6:4e:ea:43:7f:
07:5d:c8:18:e5:d8:f6:88:f4:05:0e:ea:eb:ea:1e:19:7d:9c:
af:f8:3a:76:4e:7a:bd:c2:8a:75:18:e2:b9:a9:c1:f1:0f:e2:
1b:90:fc:60:8e:78:08:69:f8:2c:91:16:3d:0d:c5:80:4b:70:
16:c5:b9:69:5f:19:b0:3f:33:62:f3:4e:78:10:c1:f7:b7:67:
66:6e:3e:36:5f:a9:40:3c:34:52:df:25:9f:b4:39:3f:2a:eb:
1c:81:05:f3:b2:6b:0f:10:fd:4d:9d:8e:41:13:d2:f4:b1:a5:
fc:f5:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:54 2025 by rpki-client