Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: 8tnndGTicOCuqyfL5RNEkIBENe68cxyTUxdqa/CpkNc=
Subject key identifier: 03:C7:79:E6:28:A9:90:C6:44:09:D2:57:0A:B3:B0:F3:91:2D:AA:E7
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 0198D6601F35E6BB9FEBEF16BAA6A5FE7BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0ECC
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: QsYRidB8n1LDKewfYOZXDpoFyFS/MpRh48XUQ5YZkUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1f:35:e6:bb:9f:eb:ef:16:ba:a6:a5:fe:7b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=03c779e628a990c64409d2570ab3b0f3912daae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:a3:bb:37:f8:3d:23:f0:86:d3:e9:7f:59:
49:97:6b:74:10:2a:35:70:ad:b6:7c:40:c4:54:ff:
e9:27:19:0e:43:7d:02:20:ad:02:25:26:c2:c2:ef:
86:ca:b8:9c:10:db:bf:53:fc:8c:70:cf:d3:f7:d4:
91:29:d5:89:8a:bb:f5:b4:4a:1f:c4:c8:91:3a:01:
20:88:cb:14:72:dc:cb:a0:c2:a2:b6:67:1b:49:bd:
82:57:65:70:46:9f:0c:1a:0e:42:f9:80:d0:ba:3e:
eb:3e:ac:b5:d3:b4:df:af:92:d0:86:5c:6b:86:df:
7f:3d:f5:ae:33:7f:47:a3:07:bb:8b:e0:8c:b7:b2:
5d:57:f4:c3:36:21:ad:91:4f:fe:30:3d:2c:23:89:
a2:4b:de:69:b9:f3:e0:9e:a6:19:56:d7:39:6a:ab:
e6:d6:00:14:a4:72:4d:c6:17:5b:be:6c:7d:5a:1d:
f3:af:8d:88:3c:09:5d:f6:1e:b7:35:90:e4:5a:97:
b7:e1:aa:14:56:f1:4e:51:22:7b:d4:65:1a:25:9f:
63:7f:6b:14:59:40:24:ff:81:4b:7c:b0:94:ca:64:
f3:5c:da:90:0d:05:17:0e:a1:1d:76:a1:c1:c8:8e:
72:a8:6d:d6:3f:b3:9b:f0:c7:36:eb:5d:d1:ae:ed:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:79:E6:28:A9:90:C6:44:09:D2:57:0A:B3:B0:F3:91:2D:AA:E7
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e8:4d:60:7a:70:40:57:25:c8:3f:36:2d:12:ee:35:5d:4c:
e0:9f:39:0c:f7:3a:5f:42:a2:5e:a7:64:de:20:c7:ac:e8:d6:
aa:29:63:9e:40:35:4d:34:df:6d:3b:e0:64:79:8e:37:40:73:
db:12:9e:5f:82:bb:4b:ca:88:99:a2:37:57:82:df:b0:ae:fe:
b1:d1:09:67:b5:a1:97:27:d9:af:e5:37:9f:e0:e9:d6:a7:7d:
02:be:11:4e:67:41:32:5d:ea:51:e4:88:b5:ce:31:16:0c:4a:
fc:86:e7:51:0e:3a:f1:9a:65:41:3d:ef:5b:6e:2c:17:71:8b:
a7:ec:bc:4e:72:81:2d:76:df:3c:9d:53:e5:b5:54:d3:b2:08:
61:35:17:ca:7a:ab:c3:ac:65:dd:92:69:87:4a:8d:bb:aa:10:
32:6c:9b:91:24:10:20:e7:ea:b4:2f:70:8e:9e:7d:78:d4:86:
c4:17:f8:e8:cc:d9:51:29:10:95:a6:1b:86:be:cd:87:6f:50:
94:57:90:5f:07:ca:cd:f2:7b:ef:f0:36:fd:c3:f4:dc:5e:99:
0e:e3:c5:2b:0c:6d:bd:44:82:ec:2a:52:b8:06:bd:e2:d9:a2:
d0:78:96:43:f6:79:af:71:b7:07:97:46:2d:51:59:9b:e6:1f:
6e:4a:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:49 2025 by rpki-client