Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: eq5d5f2QAVhlWcP5CNdgzzd7Sk98c+VrD7Uzjbe4jNQ=
Subject key identifier: CA:9D:DE:CF:96:E3:8A:70:F6:19:54:E0:6E:4E:A8:A2:B3:E7:B1:14
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 0198D5F121BC8DC3959E547FE7E046A998BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0F59
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: r6IxBiofiW2a629JyCwTV5w5BiTAsllUUb6Bf/B0UZk=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:21:bc:8d:c3:95:9e:54:7f:e7:e0:46:a9:98:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=ca9ddecf96e38a70f61954e06e4ea8a2b3e7b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:19:05:02:7c:59:ba:2f:09:e3:8b:33:b2:
cd:48:43:f5:96:f1:c2:e1:41:2d:e3:53:0a:85:87:
f7:1b:fe:92:2c:1a:10:ca:68:9e:08:51:75:9d:ff:
2c:9a:40:6c:12:3d:49:ed:b2:af:bd:df:38:86:e4:
81:a0:39:c1:8d:19:52:ad:78:08:f8:0e:75:e2:98:
bb:5f:56:ef:ba:9b:7f:f0:29:08:50:ee:c6:7f:d8:
38:61:0a:8b:9d:8b:2f:9a:45:9c:d7:f4:c9:2f:73:
35:95:b7:16:37:42:f4:53:f9:87:f5:6f:a7:61:b7:
b9:a0:60:a1:62:84:82:11:5d:f0:fe:cc:96:02:22:
86:b0:7a:df:6b:17:6b:af:23:ec:ae:a8:0e:b6:a9:
e6:bd:01:88:f1:cc:04:f2:78:c2:55:bb:13:e6:6f:
cb:ac:e3:b6:22:fe:55:84:6f:44:9c:cc:fe:71:60:
89:2a:de:9e:68:96:4a:ea:b1:a6:04:e6:de:97:64:
7c:fe:26:7f:a2:85:2b:43:41:27:21:1f:f6:b0:3b:
7c:f4:6f:67:20:97:43:e3:07:f3:ec:bd:08:21:a8:
cf:1e:07:ea:8d:ad:c8:17:f9:21:87:ed:df:53:d0:
9a:9c:54:f8:14:53:c5:44:a6:ac:31:d3:8d:c2:6c:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:DE:CF:96:E3:8A:70:F6:19:54:E0:6E:4E:A8:A2:B3:E7:B1:14
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e4:01:c8:d3:6d:27:fa:7d:c2:85:f2:ef:4f:c0:d5:93:3d:
c5:ff:97:3a:5d:39:4c:5f:78:9a:cf:27:dc:e3:62:e8:61:eb:
51:d4:c0:d0:0b:4f:68:6c:b9:ea:c5:09:c5:39:db:c3:7a:67:
ae:5d:a2:be:65:0c:9b:e2:4c:47:4c:64:8d:03:a2:3e:ea:5b:
ce:4f:9d:82:c4:66:7e:55:58:73:7c:8c:3a:30:cd:32:7d:6d:
df:26:74:8e:42:ff:53:b4:70:97:66:5d:d6:a8:c5:ee:01:1d:
b5:e6:a7:57:65:e4:02:4d:19:a1:40:a3:70:2a:a7:ff:20:72:
9b:91:0e:a4:21:c6:a3:70:51:da:3d:41:6b:11:a9:29:12:9e:
52:18:1a:87:d8:fd:27:e3:a4:9c:71:0d:88:16:e0:4e:13:4e:
f5:8d:36:6a:e5:0e:3f:4a:87:c8:f6:63:0e:02:e3:e9:55:5d:
0b:15:f5:70:6b:15:2d:87:b5:16:05:40:f6:68:aa:0a:74:d2:
72:de:bf:3a:0a:dd:29:df:b6:03:26:20:ed:4e:ac:9e:fe:0a:
31:77:e0:58:20:32:0a:33:07:0e:18:53:56:7c:13:b2:c1:4a:
9d:f6:0f:a6:9e:b0:bb:f6:f0:85:5a:e3:2b:41:98:10:70:d3:
fa:c7:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:02 2025 by rpki-client