Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: nmdza6SZrAfcIk4k9MBGryWhkQLiFlMBsui3KjvZH+g=
Subject key identifier: 3A:94:88:5B:44:FB:33:FC:0B:68:0F:37:75:CA:FE:09:B2:7F:A0:2E
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 0198D5BBF9B5379C08E22F345CBB5E03E4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: iYHKgBmEiQ90w9aQSsQ+ZQQgGNVbZ7z9+OLjZsBVq0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f9:b5:37:9c:08:e2:2f:34:5c:bb:5e:03:e4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=3a94885b44fb33fc0b680f3775cafe09b27fa02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:e0:f1:a2:28:d0:ec:03:ab:38:86:a9:9f:
32:59:e1:51:42:dd:cf:2b:68:10:45:20:6f:eb:7e:
49:b3:4e:7b:46:54:b6:19:07:a0:ff:14:2d:c4:22:
da:5c:35:f8:28:82:f2:25:21:00:e9:91:51:f3:41:
d3:6b:d4:03:b5:58:26:8e:5f:ff:8d:5d:28:82:67:
18:ee:1f:78:e9:4f:de:55:a4:d2:af:ff:d6:3d:e7:
5a:1e:83:10:d0:ce:79:93:24:54:19:89:17:68:dd:
63:0d:3f:cb:0d:16:81:47:6e:cd:28:01:64:72:30:
24:b5:51:e7:19:11:aa:4b:cb:0b:23:8c:03:7b:2b:
af:51:5e:fe:03:e5:47:02:6e:bd:21:a0:24:db:00:
45:d5:e8:81:17:c6:30:ec:9b:7b:3c:09:a5:fe:e9:
f2:e0:8b:6d:fb:94:2b:a6:5d:39:16:fc:fa:9c:31:
2f:4d:f0:7f:95:8f:ea:cc:47:e7:3a:2f:f2:40:45:
d9:c2:44:cd:ff:2d:dd:70:81:50:4b:3a:d2:b6:bc:
2c:de:2c:06:52:57:dc:02:86:d4:06:c3:bd:e4:6d:
cd:97:f4:91:aa:ef:97:db:86:e9:52:e1:cb:f3:bb:
55:1e:c1:e8:8d:24:0e:20:05:02:03:2f:9a:28:52:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:88:5B:44:FB:33:FC:0B:68:0F:37:75:CA:FE:09:B2:7F:A0:2E
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:65:5d:16:14:ef:1b:dc:a2:fb:4b:3f:b7:1e:16:cb:16:
27:e0:da:97:cf:89:35:29:30:67:01:62:6e:46:73:21:d4:8a:
b3:2a:2d:53:d1:26:02:ec:56:1a:ac:b7:90:95:2c:47:63:93:
d3:f0:d9:fb:f6:5b:54:a8:79:86:7f:a1:32:bc:b1:df:83:5e:
91:77:9f:26:48:75:a6:c8:cb:aa:77:90:97:b8:71:45:7a:88:
1f:2e:72:ae:73:25:31:d0:96:8f:ab:8f:33:7f:38:3d:f7:f8:
83:28:d7:91:e8:0b:2e:d2:ca:5e:13:78:7d:02:12:a2:e2:0a:
b4:b0:c4:7d:03:a4:05:3d:7f:ed:a3:0d:d5:0a:7b:45:d6:41:
9b:d3:4a:f7:19:60:ef:65:95:2c:c3:5e:29:d7:f6:19:84:ff:
d3:b6:05:44:58:8d:cc:65:87:91:12:df:a2:0a:47:c2:87:f4:
05:03:e8:72:3e:5f:b9:da:b8:d3:bc:32:11:1b:aa:f3:41:30:
02:d0:23:a3:96:d3:a4:1f:5b:6b:8a:50:98:e8:fb:55:a4:4a:
fa:ea:72:e2:85:92:f0:4e:d6:ea:c7:7b:6a:b2:78:d9:61:ae:
cf:15:f8:0f:13:98:c2:1a:3d:21:64:fd:b1:9f:75:86:77:f4:
15:b0:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:55 2025 by rpki-client