Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: WQxFSvmkv8iElZ7VXP69PGzeiMZZuRqc6HBgwOYd5w4=
Subject key identifier: EB:8E:D7:24:2C:B5:4A:6D:C9:20:A3:F3:51:6B:0A:EF:93:25:98:88
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 0198D4A81C7DC6D6706A28F63FA3B1C92629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 03CA
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: msh40CDaCem5MTBhf6hnzKkLVZ0HyRjI/EidvYt9E1s=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1c:7d:c6:d6:70:6a:28:f6:3f:a3:b1:c9:26:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=eb8ed7242cb54a6dc920a3f3516b0aef93259888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:c6:e1:56:d1:dc:35:3f:0e:ee:cb:b3:3b:
33:fa:62:47:98:02:3c:29:47:45:8e:89:cc:9b:8d:
25:53:5c:99:ce:c6:3b:43:d0:89:f3:bc:33:c4:8b:
80:28:30:81:d7:f9:e1:3c:6d:39:80:8d:24:1a:5c:
ce:a4:95:7a:d6:c6:87:b8:7b:f2:bb:07:28:89:6d:
c7:9a:33:27:3f:91:8b:93:d2:0c:c6:82:e2:39:81:
18:9c:50:45:b1:c1:3e:2a:46:7e:a0:aa:02:f2:4a:
aa:2b:02:f4:48:c4:23:a2:c1:9c:54:ec:1b:d0:37:
7d:9d:59:c5:0e:c4:a8:8e:a3:06:e2:a5:ee:30:6d:
56:6f:bc:e4:18:92:c2:bf:d6:fe:67:f5:39:f4:1f:
6f:1c:c4:33:0e:48:4d:e7:46:1f:7f:57:27:24:6b:
34:b6:8d:a2:e5:f8:89:77:e7:c8:d3:f0:71:b0:1b:
ae:9d:09:7c:1e:c2:e3:ca:bc:b9:d3:4d:4e:17:ea:
1c:ca:eb:4f:ce:d4:18:47:64:1f:e4:3a:80:68:8f:
5e:2b:18:2e:80:b4:e5:9f:7d:d4:83:ca:22:03:b9:
bd:19:da:e5:f2:05:d2:92:d7:f9:ba:4c:33:b0:42:
1b:7e:5c:12:de:3c:a8:28:c0:43:79:05:3c:69:ee:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:D7:24:2C:B5:4A:6D:C9:20:A3:F3:51:6B:0A:EF:93:25:98:88
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:18:4b:17:8c:31:a1:3a:cd:47:bb:96:df:5b:8b:31:45:f8:
cb:2d:4e:d7:40:2b:8a:77:1b:3d:28:3f:b1:32:66:d6:4c:23:
f7:d2:f2:c5:69:6d:4a:1a:44:4e:88:cf:13:79:e4:aa:5d:82:
1e:4b:f3:55:48:cb:41:eb:ce:d5:36:8c:6c:0b:5f:f4:f3:81:
2a:3d:d1:db:8f:a4:f9:73:2d:0b:de:be:e5:4b:94:f0:67:b1:
74:51:99:75:38:aa:cd:f6:bd:80:79:b1:bf:fb:bf:ca:f2:66:
6a:0b:6b:e5:48:43:11:e0:62:c8:4c:bf:38:73:da:ac:26:71:
d5:01:e9:8d:92:c3:e2:ba:f7:8a:17:5e:98:f8:2c:ee:83:98:
29:be:21:5c:c9:18:f2:af:f5:57:22:e8:08:b2:6a:a6:09:3a:
50:38:35:aa:a9:06:0f:50:7d:6d:4d:78:94:5a:86:ac:6a:ce:
90:e8:9f:b8:bd:0c:76:c8:5a:67:c1:19:3f:35:db:00:06:e9:
cb:27:b7:f9:0e:5d:8d:24:fd:ac:9c:82:ef:84:97:ba:31:88:
99:13:cd:e1:e8:a9:80:42:44:68:f8:3e:22:d4:d9:19:03:8f:
bd:c2:a1:97:3d:d3:69:50:b2:e5:98:73:f5:8b:81:d2:0d:c3:
5b:8a:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:18 2025 by rpki-client