Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: V5K14Ecmk7fynpxjNVcv+J9ZgWQeBf2cRG+zutIFVxo=
Subject key identifier: 0A:A4:44:B8:D8:17:CD:96:12:47:E7:95:C1:2C:55:4B:EF:8F:F1:4A
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 0198D54E65823353B3FEAF3BB21A226355AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0D08
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: XjY6bVBB7hBTGzKuOaMJZSEZldnrM/B6GCiJT9ekN6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:65:82:33:53:b3:fe:af:3b:b2:1a:22:63:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=0aa444b8d817cd961247e795c12c554bef8ff14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:1d:f9:82:10:23:d3:7e:2a:d1:7b:b1:a0:
d9:41:c4:c6:56:56:c3:08:2b:df:96:2d:e7:79:70:
20:ce:b7:b1:41:a5:fc:3b:c7:19:da:43:e7:c4:6e:
d9:f5:ff:9a:4f:96:40:ce:91:f9:a1:22:a0:a7:1d:
3d:f2:a2:d1:11:81:f2:aa:dc:82:61:3e:b2:fd:6c:
f3:18:e4:76:36:a6:a7:fb:d0:58:53:f3:7b:eb:e2:
9b:73:2a:49:57:56:cb:e8:b1:31:94:7e:4c:ad:81:
c0:06:cf:6c:9b:cd:63:46:ce:70:38:3b:70:05:ef:
fb:d1:d3:e8:6f:5f:9e:5d:45:ce:42:35:ba:e9:cc:
1c:c2:15:87:9d:61:d4:29:0d:47:1b:e3:df:a2:37:
e1:3a:0a:e2:72:5e:ac:b7:d1:a8:b1:49:fe:d7:18:
b6:cc:d7:a5:c2:7f:8a:7b:ee:06:42:7c:41:5c:6c:
a5:59:af:48:2c:e3:46:64:39:8a:c0:5d:78:56:06:
33:5f:4e:8f:bd:bc:29:4d:dd:52:03:35:ea:94:e3:
71:64:36:b1:3d:01:e4:64:24:15:28:01:7c:13:14:
90:fa:70:21:f6:16:b0:d2:11:84:11:f3:68:63:81:
ed:a1:d9:76:2e:b9:a7:ea:13:4f:e7:06:fd:98:95:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:44:B8:D8:17:CD:96:12:47:E7:95:C1:2C:55:4B:EF:8F:F1:4A
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:14:9b:69:54:b3:ff:c4:c4:9f:6a:09:e5:a0:4f:07:d7:56:
04:36:0a:38:4b:4a:f3:a6:dd:75:6f:35:3f:fa:50:27:3b:3f:
9d:cc:cf:c8:e2:4b:5d:77:98:da:80:8b:85:ee:51:0a:39:a5:
67:ae:b0:6f:6b:39:e3:9c:da:01:24:2b:3b:ca:14:d6:b2:1e:
76:92:27:0c:9e:88:81:d4:eb:52:3c:25:20:21:a1:5c:15:c7:
1a:91:16:2a:0f:75:0e:93:63:27:6b:3b:21:fc:47:07:46:0f:
f8:e0:08:e7:9f:45:11:8e:d7:a8:01:b2:2d:2f:0d:38:88:5b:
2a:a3:98:e3:c4:04:5d:a6:01:ec:6f:ab:6b:ac:57:5c:2c:19:
7a:d8:3e:64:1a:64:c5:67:50:3e:b7:cd:6b:0a:6f:48:da:02:
f6:c0:ee:11:5b:8a:b7:c0:10:9c:21:ab:24:80:c3:f5:17:be:
b5:00:3f:02:53:af:f8:f1:f0:d0:d3:81:83:07:ed:33:c6:41:
8c:84:8e:aa:bb:9a:c8:80:41:fc:04:be:4b:66:5d:be:6c:2e:
6c:b1:d0:71:72:08:e4:7d:d4:9b:2e:29:a2:86:d9:8b:4f:2b:
a2:13:c2:6d:b2:58:7e:f5:ec:f3:d8:94:97:db:7a:eb:1f:ad:
19:b2:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:38:00 2025 by rpki-client