Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: gR3B6gE89nCK+O3IFWOqwqUP+7BVzkPOwnZXL4EKlaU=
Subject key identifier: 76:72:52:58:C2:5A:9F:83:C3:BD:4B:35:93:7D:5A:08:E0:FF:30:17
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 0198D65FA477EC06292C4776556F392FD862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 12E4
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: 39SLpA9/i6dmpqr5WWlcGIR9JoqM2cUlTd/qBwF2hSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a4:77:ec:06:29:2c:47:76:55:6f:39:2f:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=76725258c25a9f83c3bd4b35937d5a08e0ff3017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:19:33:7f:c0:10:ed:ba:10:80:e2:fb:0a:
9e:35:54:c2:0c:f3:75:53:32:13:5c:84:97:62:0c:
8b:72:89:f0:32:d8:f9:85:10:6c:04:04:78:a2:c3:
b9:07:7b:50:6d:93:28:e3:c8:d5:1a:f2:d5:5b:58:
54:2f:cb:4b:fd:62:31:37:92:37:96:e3:d5:f6:c3:
c4:f7:8c:0f:a3:db:7f:1e:03:1f:15:fa:4b:e9:39:
8b:77:18:6b:34:60:ff:ff:eb:48:5a:4f:50:ea:25:
60:b6:15:9e:1a:e2:88:81:ef:9c:38:2d:60:65:74:
0d:49:72:c9:d0:d0:28:18:83:68:60:e5:20:5f:0e:
e5:21:8f:d3:60:ad:ca:38:41:a2:58:22:a4:12:8c:
2a:a9:d0:56:3d:d4:90:21:be:5c:b2:01:16:6e:86:
db:17:12:cf:b8:45:d9:59:16:7c:f0:1f:7b:1b:b7:
65:18:dc:42:b8:38:f6:23:08:ca:3f:f3:0b:8a:d9:
b7:a3:b3:ab:92:3b:6b:f3:5f:50:47:e7:08:de:cd:
42:69:cc:95:3d:68:94:28:d8:69:5e:1d:c7:94:9f:
78:ce:b0:3b:b2:60:83:2c:91:8e:ed:b1:e7:03:d5:
53:47:b1:4e:c3:87:62:44:67:86:c8:7e:a1:0d:05:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:52:58:C2:5A:9F:83:C3:BD:4B:35:93:7D:5A:08:E0:FF:30:17
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:8e:22:79:49:09:58:b5:27:8b:25:14:aa:08:ed:76:ca:
b7:af:c3:3c:6d:12:bc:69:e7:20:ae:4f:5c:b5:80:87:c3:fc:
0a:7e:7f:86:87:bf:c5:bb:b2:41:67:be:e1:4f:fc:8c:da:c8:
78:d9:26:0f:a4:99:52:6b:24:46:0d:73:54:da:44:27:92:ed:
26:ae:a6:fe:cb:ae:99:77:f7:4d:b2:5c:9c:73:78:f2:f4:eb:
fb:74:dd:88:70:88:d1:d1:5d:93:36:c2:fe:e6:54:30:06:e8:
0b:fe:08:a2:9d:e5:51:2c:0b:a5:60:f7:a0:11:84:f9:87:ca:
a6:70:2c:cc:a1:f5:8f:2b:dd:1d:5f:30:6b:03:53:e9:51:b1:
d3:dc:a9:aa:7e:17:17:9f:74:97:51:4d:fe:f3:07:1c:dc:ff:
65:74:13:a2:5e:ee:51:6b:84:90:d4:d6:d4:73:9c:e4:e1:3b:
1b:56:2b:72:6b:1b:fd:ed:54:7c:7b:d9:35:fc:50:28:62:65:
bb:4e:a6:af:6c:d4:a2:f6:90:2b:74:a0:6c:9f:66:fa:6f:6e:
e0:4c:9d:32:ac:26:bb:9f:de:6f:99:f1:67:0f:fb:d7:7a:02:
54:7e:fa:2d:18:bd:68:ba:fc:dd:bd:9a:55:2e:1b:f2:26:c4:
c8:51:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:37 2025 by rpki-client