Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: V88g0eJs366ixoPNc+kOnbScPpoc+86Z9StHEHHIvGI=
Subject key identifier: C6:F8:EC:99:C9:C4:96:5F:64:E5:21:39:25:11:24:8E:26:68:0A:C3
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 0198D7061643F005D33A7FA6E530168E1BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 11ED
Signing time: Sat 23 Aug 2025 13:02:36 +0000
Manifest this update: Sat 23 Aug 2025 13:02:36 +0000
Manifest next update: Sun 24 Aug 2025 13:02:36 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: ISl81Q5XcmftWYlxaNlifqVNHbRj9XHARQDW05bUXYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:16:43:f0:05:d3:3a:7f:a6:e5:30:16:8e:1b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Aug 23 13:02:36 2025 GMT
Not After : Aug 24 13:02:36 2025 GMT
Subject: CN=c6f8ec99c9c4965f64e521392511248e26680ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:df:c1:69:46:de:b9:7b:70:88:d1:54:67:
53:a7:0e:17:ee:b7:14:6d:51:46:d5:b3:e0:64:99:
51:a9:c9:b3:d9:ae:55:c6:5b:44:4b:de:25:ad:28:
5d:2d:53:20:d3:87:31:d1:c9:a0:a8:e1:05:58:ca:
dc:01:72:45:d1:20:da:7d:57:c7:a8:eb:87:b9:99:
32:76:6e:90:da:b9:3b:c5:15:f0:77:6e:8e:d9:0a:
04:19:ba:c3:7f:ba:31:30:3d:12:3a:cf:4a:e1:5f:
d8:3e:37:aa:0f:c0:4b:c9:b2:55:a8:07:92:25:45:
a2:ca:f5:ae:67:f9:57:88:86:96:9c:8e:d8:2a:e4:
25:8b:3f:28:6b:31:56:6f:f2:7e:c8:c4:3c:af:5c:
f6:4d:14:42:44:c6:35:02:ee:38:82:65:3e:b4:53:
4c:c1:60:2f:72:e8:61:a9:e7:5c:d0:e1:e5:2e:61:
c3:b1:33:a1:63:bd:93:c1:bf:54:16:1f:1a:2f:4e:
c0:2f:7e:a1:9e:30:c2:9c:cf:b5:f7:85:c1:05:cf:
02:3f:04:40:f3:6d:71:98:15:39:cb:52:9f:4a:a4:
7c:5f:1d:ec:42:77:e1:92:c3:28:55:4a:ff:99:9f:
ff:c9:e3:a4:f7:9a:40:45:84:5b:a8:74:0d:bf:c8:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:EC:99:C9:C4:96:5F:64:E5:21:39:25:11:24:8E:26:68:0A:C3
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d8:a3:8a:17:2f:36:2c:34:0d:ff:5c:0c:46:45:f1:20:e2:
61:7b:6a:a5:0c:f4:d6:90:7b:1c:2d:66:4a:68:66:18:00:f8:
93:fc:06:5f:4c:97:51:46:37:4c:2d:10:36:db:9c:79:8b:c5:
c0:a5:3b:cc:d2:5b:54:1f:63:ac:13:ef:c3:76:3e:f5:3f:d0:
20:fe:3a:93:57:aa:1f:6d:3a:9a:f5:40:da:03:f2:63:2f:28:
88:4f:30:df:3a:d3:ea:84:09:4c:a2:a2:d9:4d:4b:16:02:a7:
6b:56:24:e3:39:53:d9:67:a6:9e:b9:04:5e:5a:9d:05:b2:d8:
e0:9f:bf:a0:d7:ed:3b:73:a6:01:55:9d:6a:e9:63:6a:cc:fb:
2b:75:5b:cf:72:20:98:9b:26:80:e2:77:56:ca:c8:5a:d7:5a:
79:9a:bb:0a:bc:49:c3:d2:80:ec:90:81:22:a9:13:7e:7c:d5:
2f:70:01:e7:ae:46:91:c1:9d:5d:a1:88:0e:f1:0e:07:d1:b3:
ee:07:68:1f:57:d8:a0:e9:66:e5:b7:5e:ec:df:9c:db:1c:0e:
7b:7e:96:ff:84:03:4b:be:70:c6:2e:5e:fa:a9:d6:36:b4:1a:
9b:f7:98:9e:10:1d:96:e9:fd:7c:73:4c:88:75:53:de:3c:87:
67:49:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:51 2025 by rpki-client