Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File: JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier: 0Rf9zAbM0QBgZrSr/BI386z6r83wcUbPv6QejzXT6J8=
Subject key identifier: E2:8D:A0:6E:C9:23:86:25:8D:B1:D9:B7:4B:B2:15:E1:2D:78:69:DE
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 0198D473F083F6FF4EBCC944A1B1D00EEA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number: 0297
Signing time: Sat 23 Aug 2025 01:03:44 +0000
Manifest this update: Sat 23 Aug 2025 01:03:44 +0000
Manifest next update: Sun 24 Aug 2025 01:03:44 +0000
Files and hashes: 1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: nQWynUmLL9hIilcubvNzqldnuNFwOmyV9J4KM0dmliE=)
3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f0:83:f6:ff:4e:bc:c9:44:a1:b1:d0:0e:ea:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Aug 23 01:03:44 2025 GMT
Not After : Aug 24 01:03:44 2025 GMT
Subject: CN=e28da06ec92386258db1d9b74bb215e12d7869de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:8a:b6:88:c8:a7:23:63:7d:bb:70:35:56:
76:d4:f4:ce:69:93:2e:17:0e:88:fc:d3:17:b5:7d:
50:00:62:1d:be:d0:b1:96:ea:02:84:f1:0c:94:fb:
d1:b3:fa:0f:30:5c:50:00:72:af:aa:31:77:63:12:
d1:cb:95:7b:f4:47:de:1c:fd:7c:c9:b0:71:06:b2:
e3:b6:8a:33:6c:1c:be:9e:c6:0b:3a:7c:1a:bf:8a:
15:87:e9:f9:1c:86:1f:85:22:de:c1:31:03:57:9f:
13:ee:5a:b1:75:98:ce:16:41:b1:a9:31:b9:06:c0:
41:b8:32:af:2d:45:b0:0e:ee:2f:34:e2:1d:e0:1a:
08:76:d4:9a:c5:53:be:95:16:f2:6a:df:10:6a:8b:
37:c3:4d:5b:4f:4f:f5:ed:73:59:00:00:77:2f:80:
a2:6f:62:b0:b7:6e:a2:61:8b:c8:a4:0c:8e:9f:63:
47:96:aa:ae:07:cd:fc:be:05:f0:c8:43:af:ed:4e:
41:36:7f:73:6c:a2:10:db:24:c0:95:d6:af:df:78:
c2:3e:0b:6c:82:4a:fa:66:9c:90:c0:c0:81:d3:60:
db:f0:56:6f:9e:26:68:0a:33:b9:72:94:70:34:ed:
95:08:73:1d:0f:75:5d:d3:ee:d9:a2:39:6c:dc:d0:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:A0:6E:C9:23:86:25:8D:B1:D9:B7:4B:B2:15:E1:2D:78:69:DE
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8f:2f:e9:bb:a8:6f:bd:87:84:39:55:80:5e:3b:9b:ce:8b:
d2:b9:07:1a:dd:49:29:c9:93:d5:79:44:68:2b:14:e8:64:7f:
c3:96:f9:86:38:75:ac:a0:e3:63:87:06:07:51:ff:b1:57:73:
f6:2f:b2:ed:ea:2c:17:c8:f3:5c:47:a8:77:f0:14:f0:54:9b:
b5:7a:63:2d:ad:5b:c6:06:b9:45:20:5d:d3:37:47:6b:83:a7:
da:48:6d:50:03:39:a0:c7:86:ed:d3:15:fe:c6:d8:8a:f0:fc:
ad:58:65:cd:13:40:35:dc:03:c0:ee:b5:95:c6:34:f7:13:81:
41:20:cf:96:02:fc:32:ff:1a:39:80:d9:5b:cc:47:a5:8e:fb:
15:a3:e3:e3:e9:47:aa:25:46:a0:15:19:27:5f:81:b7:fe:f8:
fc:2d:ad:00:02:d0:1e:08:2e:97:72:0b:65:1b:35:d2:63:45:
42:32:73:ca:26:f2:e1:7c:bc:4e:7b:7f:f4:e7:41:66:54:80:
b9:42:27:8c:6e:59:53:7a:5e:d9:fc:5e:da:17:a2:66:9f:d4:
91:de:2f:2b:5c:c8:02:8c:45:b7:d5:81:70:c6:fe:df:a3:16:
e3:21:0f:e8:1a:fb:bd:3d:f8:ae:50:5b:ab:62:40:cd:75:c7:
29:10:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:20 2025 by rpki-client