Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: kS3cC+HZBlTRisJGFZtlE3oeoUtoz0C9hT7hV+mcJrE=
Subject key identifier: 41:D4:2B:45:85:04:00:DC:19:20:54:48:FD:C3:89:31:A3:75:BC:61
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0198D51560E4D96DB78416E18DFC7BE1B741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 16AD
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: allF+xYTpW4ORn5o5a7yl63m909Pm4eo1WnKHwSm+nw=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:60:e4:d9:6d:b7:84:16:e1:8d:fc:7b:e1:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=41d42b45850400dc19205448fdc38931a375bc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:36:a6:3c:a1:5d:90:11:0b:de:56:a6:a0:
72:d6:5b:b3:ae:7d:6b:fb:52:67:96:7d:c7:93:17:
92:c8:c7:c4:d3:ef:e4:bb:0c:a4:d8:64:7d:19:61:
10:3c:62:5f:92:cf:c2:20:96:e4:89:7c:2b:a9:40:
1d:81:90:45:80:69:d6:a3:18:37:36:fa:30:ce:fc:
33:be:7d:cc:a3:81:ea:77:56:03:d5:7b:0d:d3:77:
54:3f:df:88:cb:22:5e:cd:4c:a2:85:0d:c4:f7:d5:
d9:f9:1f:5d:73:d1:b2:46:e5:d7:8a:e6:7e:46:fd:
7f:e0:a3:36:de:65:a0:c8:4a:6f:7f:8a:62:81:7b:
5d:3c:ec:5c:7d:98:dc:18:3b:81:98:2f:6a:43:65:
2a:f0:1c:66:1d:5f:aa:74:46:55:e0:84:76:2f:57:
c9:25:55:53:55:f9:20:fb:51:9d:8f:7c:7b:16:bf:
cf:b8:ab:cb:76:30:14:bd:a2:9a:b3:a9:cf:40:9e:
4c:9d:bf:ad:ac:3f:af:54:5d:3e:3e:be:c7:1f:1d:
cc:32:87:f7:40:bd:92:96:91:5d:2d:73:dc:de:51:
6a:9e:74:1e:66:6a:79:75:99:cb:02:dc:2d:15:e9:
a0:09:b3:ee:69:83:94:f6:d0:d3:f8:a6:f0:28:0e:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:2B:45:85:04:00:DC:19:20:54:48:FD:C3:89:31:A3:75:BC:61
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:da:7c:20:bd:ea:d6:52:9e:53:1f:da:de:08:3d:80:84:
f3:d9:eb:e0:1f:67:ea:23:5d:25:bd:78:78:db:56:f5:a0:eb:
44:41:66:ab:2a:ec:98:b4:d6:9d:cb:d2:17:be:e6:85:eb:d1:
8e:fa:1d:1f:ae:55:0e:c4:65:cd:fe:a1:0e:09:32:63:85:9f:
ee:8f:6d:85:00:70:44:e4:60:a9:ab:99:ab:c5:ee:5f:b3:f1:
24:e5:70:cb:6e:c9:38:90:1a:e5:b2:b1:66:19:5a:28:57:69:
b7:16:c1:85:32:c7:02:c8:dd:d9:fb:41:9d:7a:bb:4f:c2:84:
d3:0d:c1:6e:25:77:a9:79:d6:aa:56:86:d8:c4:7d:1a:f3:0f:
d9:12:2a:59:15:d5:61:ef:cf:ca:d3:55:20:76:b4:6c:3e:05:
d2:55:bd:52:d2:8d:aa:51:3d:1b:48:e8:76:32:2b:33:74:4a:
2f:dc:30:2f:76:c0:d0:da:24:1e:6c:a0:b3:e3:30:68:5d:3c:
f3:55:02:00:ad:94:2a:9c:a9:c2:f3:be:16:41:dc:7b:0f:6f:
eb:92:ca:09:08:6a:a5:85:30:c7:33:88:89:3c:99:8a:9d:a4:
f5:6a:2a:a9:df:46:5e:70:7d:5b:3c:23:ea:69:49:12:a1:5c:
fd:6f:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:37 2025 by rpki-client