Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: Z7jqlRLMp+VaDGQzshTuqJv6THOTXWskBYmHWJrL3xA=
Subject key identifier: 4B:3C:B5:CA:82:D7:E0:2C:87:09:74:7F:9A:3D:5C:B1:BE:CA:32:8D
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 0198D54E7624889C0D0EBDB01F81E39212AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0AFA
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=)
2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: uLL4wTguil/NiTPFUh5sDV6K3GcbBpZNz3ZS5mxt2qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:76:24:88:9c:0d:0e:bd:b0:1f:81:e3:92:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=4b3cb5ca82d7e02c8709747f9a3d5cb1beca328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:cc:e8:47:eb:a1:f1:46:1c:05:98:cf:22:
b7:ba:7f:3e:81:0a:2a:1f:05:6a:cc:c6:e1:4b:7c:
3c:d8:af:c8:76:e7:9e:9a:db:1a:68:8d:0a:75:c6:
8e:82:46:cf:35:47:8e:3d:2a:67:ef:12:7a:59:8f:
2b:e8:23:70:be:f0:01:c2:4a:cb:a1:e4:45:fc:ce:
2c:0f:b7:e0:3b:98:96:97:ad:b2:d5:2e:87:c0:5f:
6e:06:ca:fd:f7:fa:fd:c8:c2:c2:04:9e:44:2d:df:
15:4f:a1:f5:33:4a:ff:df:cb:fe:34:45:d4:b0:be:
bf:f3:be:4e:61:64:45:ed:7e:2d:0d:3d:03:bc:01:
ae:bb:49:82:47:19:4b:f8:33:ab:45:77:0b:61:f5:
9d:09:17:d2:37:e9:e0:f1:42:76:4d:92:ad:73:f2:
ac:69:ab:3f:9c:96:31:44:9f:b7:81:76:ef:68:c2:
26:5e:2b:06:53:f8:8f:82:62:8e:d2:68:60:7a:b5:
a8:23:96:51:34:00:20:5d:be:46:e4:f3:ef:13:55:
34:02:92:0c:7d:10:b5:7f:33:16:f1:37:d9:8a:36:
7c:d9:3d:db:62:63:21:14:bb:36:14:94:49:52:8e:
22:50:54:72:c4:f5:be:03:5e:4b:3f:93:91:1e:4c:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:B5:CA:82:D7:E0:2C:87:09:74:7F:9A:3D:5C:B1:BE:CA:32:8D
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:b1:b9:a5:a4:ca:11:cb:c2:c4:1d:c9:d4:21:8d:4b:33:
a7:ba:ce:9f:e1:c4:a4:8c:fc:d8:fd:0a:51:b7:0f:d6:ba:a3:
df:e2:cf:fe:0f:44:5e:f4:af:68:2d:59:f9:b3:62:73:d7:f9:
5d:e0:9b:42:d1:3d:3d:19:15:f4:fd:5b:6d:1e:48:08:76:07:
11:3e:26:8d:b1:7c:81:27:73:7b:8e:e5:4d:86:91:16:5b:d6:
23:4b:f0:12:25:c2:3d:bd:64:73:96:34:e3:a8:1c:a9:28:41:
39:7d:70:e7:e7:33:6c:4a:18:65:0f:ee:da:99:78:b8:1c:96:
f1:cb:ba:05:fa:43:85:44:d8:fe:39:1f:67:08:8d:7d:40:64:
bf:3d:11:1f:92:99:a1:31:51:a0:84:be:45:a4:ec:bb:92:fa:
e9:06:86:a4:d5:75:a0:d9:e6:0f:1f:27:47:93:54:0c:d8:9b:
e2:7d:e5:63:43:69:80:b5:3e:e0:27:21:26:bb:60:3a:b9:bc:
00:63:3d:02:fe:7c:9f:f1:9c:a3:00:c5:1b:2e:8e:ec:ed:bb:
bf:f4:24:07:4d:25:98:b4:4d:e8:f2:c3:bc:6b:c5:c8:62:15:
f4:fa:cb:40:7d:3b:ed:60:ab:97:6a:44:cd:58:c9:bd:5a:4e:
9a:6e:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:24 2025 by rpki-client