Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: 5zlI71cQXmTNtWD20xzwau6WETWqar388XORJDmkIxA=
Subject key identifier: 8D:E6:C7:B1:94:30:9F:94:7B:85:09:AD:37:85:14:89:96:8D:25:57
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 0197BA7E0434AE67AAAEECD9F5F4B38862BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 02AE
Signing time: Sun 29 Jun 2025 07:01:50 +0000
Manifest this update: Sun 29 Jun 2025 07:01:50 +0000
Manifest next update: Mon 30 Jun 2025 07:01:50 +0000
Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=)
2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: aakM0HrKvVq0CF+b24lgwFnPS2pXNgr+a0FjspSRYb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:04:34:ae:67:aa:ae:ec:d9:f5:f4:b3:88:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Jun 29 07:01:50 2025 GMT
Not After : Jun 30 07:01:50 2025 GMT
Subject: CN=8de6c7b194309f947b8509ad37851489968d2557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:ef:75:5b:59:85:5e:fb:1e:7c:70:ee:5b:
59:dd:77:45:1e:f9:80:ee:dd:d7:fd:1c:5f:5a:1a:
c6:be:a3:36:38:cf:1b:23:60:54:3c:df:12:aa:d7:
3b:00:4d:8b:90:be:09:1f:e8:c5:a1:fc:73:42:50:
68:7e:f3:5f:c4:25:06:12:b4:34:f0:d6:2e:84:20:
44:92:53:26:5c:f6:da:88:21:32:fa:26:62:40:5f:
28:6f:6a:08:39:0f:0a:00:5a:ff:64:27:76:a7:f9:
9a:9d:67:6e:f4:12:4b:d9:e4:01:e6:30:a0:9e:4d:
39:bc:fb:9e:20:83:f3:7d:fb:a6:dd:6b:db:cb:e1:
75:e9:7f:6b:af:6d:c9:4f:78:6d:ef:69:9f:62:88:
3e:32:4d:0c:7f:53:2b:bf:77:7f:be:45:d8:9c:c9:
4f:3c:c8:6c:d6:9b:38:d5:6d:d5:44:ed:76:55:ed:
12:a5:c5:a2:a2:b5:c2:fe:08:99:81:7e:61:d5:62:
96:62:61:3a:e6:cf:ea:08:23:84:14:5a:25:2c:3d:
90:2e:01:ea:b3:20:cc:fc:bc:8c:02:ba:ed:66:04:
99:94:96:8a:60:79:4a:80:2d:5d:0c:64:f5:cc:86:
71:18:b4:56:35:f4:be:a7:21:af:c1:b9:82:d3:47:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E6:C7:B1:94:30:9F:94:7B:85:09:AD:37:85:14:89:96:8D:25:57
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:16:1f:83:a3:21:5b:97:cf:cd:ff:3b:2a:43:b7:7e:79:72:
30:4a:ed:81:89:ad:cf:f3:1c:3a:c7:4c:32:cb:63:3e:ed:da:
97:9d:d0:9b:2c:b1:91:65:5c:22:b5:38:70:7e:f8:fb:70:56:
0e:17:43:85:14:87:78:71:96:14:67:98:3d:e0:9f:31:44:00:
5d:b4:31:97:8c:a4:7f:ed:89:40:ae:75:76:46:71:81:be:92:
81:64:0b:81:62:65:34:7a:7a:79:85:df:48:a8:dc:a9:f3:61:
db:ec:2c:0e:a3:39:ab:61:68:76:12:92:62:e2:30:2c:b6:55:
90:54:9b:37:5e:f7:54:de:08:3f:16:ce:a0:5b:b6:5f:ea:ba:
64:3d:98:db:49:e9:14:57:8a:71:81:af:0b:32:f6:a1:e3:97:
0d:ca:98:99:dd:53:10:d3:e5:9f:b9:14:37:7f:b9:ba:74:0f:
29:f1:40:23:5b:f6:c3:0a:a7:1e:c5:71:02:fa:f3:9b:15:ff:
2c:1c:b2:2b:3c:4e:16:90:94:6c:02:79:4c:b6:5f:4e:70:ae:
aa:85:88:c9:47:e7:d1:72:1b:79:8b:6c:6d:2c:64:ec:f7:4b:
89:ce:32:e1:b4:dd:9a:9c:6a:ee:5f:fa:22:a9:8d:58:e9:78:
70:bf:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:20:11 2025 by rpki-client