Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: e2i30dzIss/0T//gTzuC4ZpJDEvMGG0f3x7iwEh0XXA=
Subject key identifier: B1:E0:4C:B3:0C:00:86:6F:9B:C0:2B:15:65:97:6C:EB:4F:99:CA:C1
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 0198D4745CC2E1BDED45FCB26574CFC6FF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:04:12 +0000
Manifest this update: Sat 23 Aug 2025 01:04:12 +0000
Manifest next update: Sun 24 Aug 2025 01:04:12 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: 8N0pgESr9O5/qk7qwpcywVfq7wfaKayL+f2p9W59fNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:5c:c2:e1:bd:ed:45:fc:b2:65:74:cf:c6:ff:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Aug 23 01:04:12 2025 GMT
Not After : Aug 24 01:04:12 2025 GMT
Subject: CN=b1e04cb30c00866f9bc02b1565976ceb4f99cac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:d2:99:2a:69:bd:7c:73:d3:8c:3b:7a:e0:
c5:5e:23:39:8d:b8:11:de:5b:8b:62:51:0b:a1:1a:
c2:30:0b:7f:1d:95:0d:a9:39:37:5c:66:58:7e:08:
4d:96:87:00:95:df:7e:ef:62:4f:35:f7:75:cd:89:
1c:a3:6c:c2:8a:2a:2e:8e:6f:34:1b:af:ae:90:d6:
f9:f2:f4:70:3f:5e:ed:66:d9:f3:99:82:50:4f:2c:
14:bc:05:9c:f7:42:0e:d9:04:16:8f:4a:4a:ff:8e:
01:af:31:4b:ef:9b:f7:0d:6c:1c:6e:8d:61:6e:87:
f0:55:b2:dd:d0:94:03:42:01:e8:12:d2:0a:80:52:
ea:65:ac:32:3f:36:4e:05:95:9b:57:14:86:36:fc:
96:79:ed:a7:a1:a8:ec:02:4a:46:65:f1:af:1e:9b:
77:d0:80:8e:7b:0a:1b:fa:34:07:60:75:81:c8:72:
23:44:37:8a:9b:32:bf:85:e6:88:4c:03:91:0c:ff:
7c:80:65:ac:b5:90:b2:bd:22:be:de:1d:e6:17:c6:
e3:03:73:bc:fe:7e:65:7a:89:de:70:df:82:25:38:
bd:a2:24:df:0d:cb:eb:c5:0e:f7:22:fe:a0:08:ff:
eb:8a:2a:9f:a1:ba:20:4d:33:9a:15:51:77:7a:1e:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:4C:B3:0C:00:86:6F:9B:C0:2B:15:65:97:6C:EB:4F:99:CA:C1
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:07:77:f6:9f:9c:5f:90:6e:5c:07:d0:ee:9c:93:ed:7b:37:
21:45:58:08:ba:3a:33:b6:fc:cf:bb:ca:2f:76:e5:23:cf:b7:
ad:7e:93:97:76:6b:56:63:c5:61:52:03:11:d9:ad:17:95:85:
1b:3f:90:34:ed:14:75:a4:15:a8:de:be:5b:3b:2e:3b:69:55:
9f:38:ff:b8:72:eb:e1:2e:f1:f6:3b:bc:8d:ef:8a:63:c1:ec:
f1:fa:fa:f4:d3:5d:58:df:bd:41:d6:e9:ae:b8:24:1d:e4:e3:
3a:6a:38:20:b6:b4:cd:d7:93:e7:ff:de:d6:81:c5:a7:0f:3f:
b8:1c:c6:4d:c0:bf:cf:b6:a3:bd:72:7c:15:2d:ed:c0:7e:e1:
83:e4:0d:f3:53:41:cd:9f:74:6f:ef:3c:36:2e:1f:69:d6:2e:
b0:0f:85:02:72:a5:9c:31:b4:0c:d8:23:95:f1:81:6e:09:ee:
7c:56:9e:c5:96:fa:95:e9:2f:b1:41:2a:70:64:54:0b:fd:a3:
0b:e4:67:94:9f:f4:e4:0d:7a:dc:83:b6:de:b3:6e:d9:5c:6d:
f5:5a:d9:55:ee:02:e0:87:8d:8c:f7:10:2c:13:8b:16:27:a6:
95:f2:f6:93:b7:8c:4c:6e:91:9c:0a:6d:cb:ad:2d:78:b5:50:
60:81:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:41 2025 by rpki-client