Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
File: jrsOsZ53d9cDgAD2wS053tEgQkI.mft (raw, json)
Hash identifier: 3kY2kMhgj0wx967ftTs40Hq5B+e3aeaLhXfvqbfoY8w=
Subject key identifier: 2D:C0:9C:BE:CD:F9:75:ED:A5:BC:EF:63:4E:6B:63:B7:70:D4:1F:AA
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 0198D6610B2A2620E8916A356BC355AA1E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
Manifest number: 0C84
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: 68-2o2gnqeFje-83JI2NL7vcFCs.roa (hash: 5XT1BGaZiWzYIBY9EJMQdD9z2CvFYvirF/G5S8/gceM=)
2: jrsOsZ53d9cDgAD2wS053tEgQkI.crl (hash: ivCpH+iaY0tnWwL8Cprd+a/J2GsO5GW0WEi0XndYItU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0b:2a:26:20:e8:91:6a:35:6b:c3:55:aa:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=2dc09cbecdf975eda5bcef634e6b63b770d41faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:5f:5c:b4:dd:1b:a1:14:eb:2d:32:2c:2a:
10:97:05:85:bf:bb:08:ee:19:77:ba:5c:35:1b:f2:
8a:2d:ce:ed:9e:34:5b:1d:33:eb:56:5d:6f:08:ab:
7e:52:06:e4:25:a4:e4:1e:85:5c:a6:cf:a1:33:ec:
79:bf:a2:bd:d5:87:6b:e6:1c:f3:a8:1a:57:ee:18:
c6:c9:28:f3:ef:14:23:ad:56:f1:a9:e5:de:23:31:
96:3f:e1:8e:f0:94:c5:45:e1:6b:d9:60:ec:e5:20:
15:05:85:c5:ab:a3:16:d1:a4:d4:b4:02:b3:31:cc:
3e:30:ad:d5:2d:2d:e3:3b:b4:08:67:08:f9:03:72:
0d:93:89:c3:74:c5:3c:9f:05:d4:fd:2e:09:78:f5:
6a:b8:34:8f:fd:7d:b5:74:96:3a:36:18:a9:61:16:
08:54:4f:75:3f:7c:29:c9:13:2b:d0:d0:e6:89:f0:
fa:ef:0a:db:cc:b7:9f:89:5c:9d:c4:e0:ae:ed:18:
ab:e3:00:10:ba:dc:68:b6:f5:87:aa:cf:25:d9:c3:
a4:71:1c:04:5b:3b:35:1b:b1:35:aa:bf:8b:d9:c8:
d5:68:f0:90:a6:6a:14:83:51:20:f5:b6:61:e8:b8:
31:b5:97:b8:e8:fc:1d:de:55:3f:01:32:92:f0:98:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:9C:BE:CD:F9:75:ED:A5:BC:EF:63:4E:6B:63:B7:70:D4:1F:AA
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:82:46:03:41:6d:93:45:0f:e8:65:eb:24:2f:5e:44:77:
3b:6c:53:10:ae:de:7d:db:c0:84:52:fe:a7:9b:94:6b:ba:ad:
db:16:b9:3b:6a:e6:83:45:fa:af:10:4b:30:fb:7b:74:f1:72:
fa:68:da:e2:17:eb:34:8f:6d:83:08:77:eb:03:57:73:a6:c4:
46:dd:a6:2c:da:24:9b:26:c5:c7:96:98:1f:2a:3b:a3:67:a6:
de:e5:5e:d7:e7:ec:7d:99:8d:79:bc:ed:de:22:70:6f:8b:31:
7d:0e:11:22:89:ce:8f:ce:91:9a:5f:11:6a:4d:a8:ab:bd:06:
f4:48:55:9f:2b:05:df:df:bb:98:e5:59:87:61:d0:c1:a2:2f:
de:da:7f:33:88:e6:58:03:b1:96:40:12:b6:63:73:87:1a:5b:
5c:cf:3c:54:98:c1:a9:e5:e4:68:d7:3f:0e:d8:b1:ed:7e:1b:
60:7a:b7:30:9b:8b:ae:12:07:42:80:56:32:fc:da:7e:38:e0:
13:5c:50:31:03:d3:0e:47:56:65:e9:43:90:a5:35:71:21:32:
25:e7:22:b2:89:01:08:18:c4:d9:df:c9:1d:3c:7a:d4:ef:e0:
8c:ea:8f:e8:83:f7:98:c1:4d:2c:ce:1f:30:9b:f2:07:f5:ea:
ea:b1:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:25 2025 by rpki-client