Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier: oHn3Jw4yhQ1pPA4S8tp/DIIGj4bwiMaqYCfJLzyojug=
Subject key identifier: 24:AD:DB:58:DE:B3:6D:5B:1E:D6:3B:07:C1:1F:9B:AE:CB:7E:43:0D
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 0198D5F12072314E8A6A4DC4A2646A700632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number: 050D
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: XOVijXohL6GDC1Kx8J5Tdsax6DM.roa (hash: 6F2C15fZUiyjtyiAXYQZ6forjHYQ0NssfRJ0NaTv6OY=)
2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: xJZDhwYgsIowNoKF2aYkUtoM+DtX2u4WA1s5n8XPob8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:20:72:31:4e:8a:6a:4d:c4:a2:64:6a:70:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=24addb58deb36d5b1ed63b07c11f9baecb7e430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:94:de:50:b1:7d:da:21:02:7b:2d:e6:c4:
61:8b:69:d6:0f:f1:56:4f:57:4f:23:f7:9f:17:0c:
1c:16:5b:c1:b0:7a:0f:7e:d3:e7:fc:a3:1e:2d:7b:
c6:96:e2:dd:d1:62:c2:a0:cb:26:71:62:db:bd:87:
22:1f:12:81:d8:09:8c:14:79:82:19:a0:96:a5:ee:
32:6c:b6:b4:c5:a1:81:d5:3c:16:7a:f5:55:3f:c7:
49:e4:49:a0:d8:c4:c0:b3:d6:67:49:05:d1:16:56:
9b:f5:db:41:9b:e9:e6:5c:74:93:a6:37:a0:7d:be:
cb:5f:e6:03:b0:72:67:93:68:7d:bf:47:2e:e7:a4:
4d:4f:3a:c7:16:2f:15:8c:c9:6c:c3:bb:40:c3:33:
a8:9d:2d:81:03:ce:5f:44:35:9e:29:11:86:8d:87:
0d:95:dd:0a:37:75:58:b4:f3:e4:d2:3d:7d:7f:bb:
62:03:c0:6b:16:6d:04:fa:30:df:01:3a:f0:ff:35:
c9:60:9e:1c:2f:1a:39:ce:bf:42:b0:b6:12:75:48:
45:b6:05:68:95:bc:22:00:08:85:75:6e:dc:91:89:
42:bd:6e:94:d1:a7:f3:5a:b8:0f:11:c3:e1:36:e5:
01:c5:1e:b7:22:7e:ed:58:f7:be:8f:24:2c:7c:5b:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:DB:58:DE:B3:6D:5B:1E:D6:3B:07:C1:1F:9B:AE:CB:7E:43:0D
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4b:f9:2e:a2:02:78:2d:09:7a:54:84:39:61:e6:87:2e:4e:
b8:32:dd:96:75:81:0e:19:4f:c3:e7:b9:d3:31:ef:dc:da:54:
17:03:ec:2f:1f:25:12:4e:6e:95:19:f0:14:11:98:6a:ce:41:
5a:c4:e4:fa:be:6a:44:6e:02:1a:93:e9:c0:27:38:9e:cd:61:
11:20:4d:e7:b1:26:fa:96:48:8b:c9:e1:08:81:3e:04:c9:b1:
f6:ce:0e:4e:68:07:a4:85:1a:c9:aa:ed:73:54:52:76:78:f1:
02:09:02:7f:4f:9d:dc:6e:f6:2c:e5:7e:a2:a0:8a:e0:1a:e7:
3f:7f:24:8b:d0:88:3f:29:20:98:5e:3b:40:19:f5:fb:c4:4b:
40:05:40:93:25:88:cc:cc:a3:11:c3:53:f6:06:5b:4e:4d:fa:
c7:d6:4d:6b:b2:01:83:28:89:2c:4b:0b:e5:8b:28:6b:46:3b:
e9:b1:b0:6d:d3:e7:39:f3:69:68:7e:0a:b3:3c:2b:14:dc:ad:
25:69:b5:50:55:b1:ff:10:91:f3:36:1a:2a:33:5a:fa:cf:b0:
b9:ee:77:64:1c:e7:fa:a6:53:78:9a:fe:73:87:51:35:60:d7:
77:5c:25:2d:dd:d5:94:cd:f9:d6:38:1e:27:26:45:52:6c:28:
96:21:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:31 2025 by rpki-client