Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: lOcZRPbswLVnEb7V1heYUXSr90oeNFOO4fPylLNBNPM=
Subject key identifier: EC:4C:54:B8:37:D5:30:3B:C2:DF:9F:D5:7D:91:4C:50:D0:E5:2D:22
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 0198D54E1AFF98B055CAE1544D8FD06008FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: 6ubxp0gwH3sdcX6HW8bCgniJbUBFxldEWs7eEjoorMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1a:ff:98:b0:55:ca:e1:54:4d:8f:d0:60:08:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=ec4c54b837d5303bc2df9fd57d914c50d0e52d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:c0:95:b7:d9:b8:5c:5f:9a:8d:6e:24:64:
ef:1a:a6:cf:3f:10:49:b6:38:12:f3:61:87:9e:ab:
01:6c:6f:c7:0d:5e:2f:39:d2:57:16:8f:70:ec:05:
87:8b:5b:e5:bb:96:d5:52:19:57:dc:9b:d6:3f:de:
5a:58:a2:e6:96:d1:b3:8f:cd:92:42:c7:ab:17:3d:
0f:d2:36:29:2a:99:70:6f:33:a0:11:7a:80:e7:77:
d2:f0:e8:3e:24:f9:84:a3:23:1a:1f:bb:34:d5:17:
07:a9:f6:06:78:f4:f5:0e:e6:3b:6c:8d:ff:a1:ca:
c2:10:41:e8:09:0c:3d:62:02:b8:f0:f7:f1:07:27:
22:b2:5f:60:0c:6b:dc:ee:c9:2c:aa:f4:19:87:7c:
2d:c6:29:99:07:ce:23:96:ab:7d:35:61:ec:7a:26:
0d:a9:bd:84:60:68:24:b3:f1:6f:e3:f5:0b:d4:7e:
9a:14:b1:79:b3:70:87:40:15:7d:e7:13:76:87:46:
3f:cb:ff:d3:91:17:09:fd:c2:da:96:60:86:1d:31:
bb:53:56:bd:68:b7:38:a5:72:ab:0e:a9:25:ed:5a:
f2:f0:36:80:a7:83:ee:94:52:f0:54:bd:90:ad:0d:
9a:42:b0:32:a3:42:10:58:7b:17:06:b8:6d:a3:6b:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:54:B8:37:D5:30:3B:C2:DF:9F:D5:7D:91:4C:50:D0:E5:2D:22
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:70:c7:36:86:40:93:e7:ed:90:bd:66:b3:33:69:0a:c0:a8:
5e:cc:67:4c:8b:52:58:01:20:e8:86:3c:95:cb:76:9d:f3:05:
6c:25:88:be:48:22:10:1e:02:2e:d0:41:52:a6:1f:ab:40:0d:
9b:dc:52:83:b2:9d:7b:6d:30:b1:c9:a3:f7:3e:3e:ed:1b:42:
aa:8c:36:17:1d:b8:d9:e3:dd:3f:d9:e7:b9:38:07:f1:11:9e:
cd:2b:d9:3f:5a:73:ec:cc:a8:20:b1:2e:50:fd:18:0f:06:13:
32:92:14:1d:bb:57:71:6b:a9:30:45:3d:da:ff:d1:ec:e6:67:
5c:86:4b:af:93:70:aa:8d:25:ea:33:2a:bd:bd:88:8e:04:58:
c5:09:47:9f:71:67:fc:ea:c2:ea:02:0c:a7:59:94:2c:d8:5b:
26:70:0e:16:dc:c7:2a:b7:fa:d2:53:bd:9f:e8:01:2a:e7:55:
54:2a:97:3e:c5:b1:72:92:d2:ed:d2:34:d6:19:c3:92:c7:6e:
ea:66:f3:f2:eb:0e:f1:d9:78:1d:a8:a6:8b:f0:d7:9e:34:ef:
59:b2:d6:b1:a8:d5:2f:f4:09:a7:a0:65:1d:d0:9e:ed:8f:78:
b8:47:c2:e7:86:de:7d:2b:8c:85:3a:8d:63:f7:21:d2:f1:55:
5e:48:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:47 2025 by rpki-client