Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: trTYj3T1FG9zfEibYcR7Ee2HCIpqTqZmzli16Vd1r2A=
Subject key identifier: F4:AC:2D:BE:52:36:1A:39:F7:30:B9:BD:EC:60:82:18:21:22:EB:49
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 0198D54E7CE21130990525FEE6A1A5C90D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: 19
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: FjU0H7vPdjT4WlcuRh8u9jonq80.roa (hash: FVDMMIfr/P3OKDJ02oDTFPsyvxmI1cgf33doeyF5iQw=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: 2gE25JLUC9bNy3/51aPeFsjRBipocwohDA72Fv9VPLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7c:e2:11:30:99:05:25:fe:e6:a1:a5:c9:0d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=f4ac2dbe52361a39f730b9bdec6082182122eb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:ed:bc:56:50:9b:b9:56:f6:cf:c7:c7:97:
82:66:95:79:fd:4b:e0:d7:30:34:8f:54:84:b4:f7:
75:86:17:de:98:72:a7:14:53:3e:08:6a:a3:25:9a:
9d:8b:47:f2:c8:de:48:8b:10:97:ec:a5:f6:45:b9:
74:1f:d7:91:1f:14:95:45:be:21:9d:2e:72:9a:0c:
da:ae:a4:0a:25:aa:ef:fc:69:4c:5c:bf:cd:44:63:
f2:70:a8:53:26:ab:05:08:df:6c:b2:7f:4d:a9:86:
79:20:89:4c:e6:d5:a8:e4:9a:32:01:88:14:19:24:
50:0f:de:73:8e:ef:a3:db:89:90:0f:51:61:0a:d6:
4b:26:63:07:be:7d:8c:94:0f:98:7b:30:cd:0a:3d:
7d:fd:e8:31:11:5f:89:e4:4d:8d:41:1c:7c:65:9f:
ca:d7:1d:fd:59:de:0d:04:18:ac:08:c6:03:db:bc:
10:7e:21:36:41:ff:fb:63:f9:46:85:aa:55:a7:26:
3a:b9:e7:66:5b:b0:4e:66:63:f7:04:b6:df:7e:7e:
d2:22:96:7e:44:b7:48:81:c6:ea:bb:6a:fe:40:d9:
cf:bb:f9:c9:9f:16:7f:bd:fe:ee:12:a0:9c:f4:cb:
8f:c2:46:a5:44:81:1d:4a:62:b8:69:18:3a:10:72:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:2D:BE:52:36:1A:39:F7:30:B9:BD:EC:60:82:18:21:22:EB:49
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:f3:83:e2:a6:81:93:ff:40:cc:15:52:e2:0c:2a:d2:29:
26:a7:df:d9:6f:a0:f4:5f:ac:32:87:4d:3d:9a:db:81:ba:b7:
7e:9e:17:a9:2a:fa:f2:b4:da:9a:96:be:9d:81:30:dc:47:b2:
c7:99:5b:92:14:e3:54:42:54:86:61:fc:bf:6b:91:01:1b:d4:
67:f7:25:48:88:7c:da:3a:d1:1e:e2:f3:49:3d:90:40:59:06:
a4:44:f8:96:fb:69:27:1c:a2:0a:60:b7:c2:2f:43:1f:17:0e:
ad:4a:60:23:8c:38:8e:a2:ca:8e:8b:4d:69:9c:2d:c3:6e:29:
69:54:61:b0:0e:84:a0:c1:94:d1:e0:93:68:45:a3:d4:06:fb:
14:dd:23:fb:a4:f6:62:87:c0:d6:7b:59:4b:ad:49:14:91:da:
0d:71:ed:60:4a:23:ad:67:f6:02:99:4a:15:86:62:e2:99:79:
b0:40:53:67:6b:26:29:a6:64:64:9e:4d:5a:ce:3c:a9:a2:b1:
f1:2d:0f:77:59:a6:5a:49:be:cf:b4:db:24:95:0d:3b:a5:95:
a2:98:67:90:c4:02:a7:cf:a2:94:23:8f:14:3c:88:07:3b:be:
c8:3d:9a:db:d0:09:7f:63:99:0a:72:f9:90:42:f1:97:ca:b8:
73:16:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:27 2025 by rpki-client