Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: wb/9xpqyvZlX9PuMyEWwU1gDNVEnUXbgUfJKSNH1+1E=
Subject key identifier: 02:1D:72:8D:83:77:99:BF:E2:19:95:B6:8E:85:74:96:00:7A:9D:6F
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 0198D705BF76224911C15CD089B68F3CEFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 14FE
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: 69vpIkgyOlkld7p7rGcGln47ejPaMGiR4zH0YPNu6Cg=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bf:76:22:49:11:c1:5c:d0:89:b6:8f:3c:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=021d728d837799bfe21995b68e857496007a9d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:6b:c2:f3:da:76:a7:69:5c:91:16:fd:9d:
81:68:17:ef:88:8b:cb:24:db:25:39:70:92:38:c5:
15:49:65:ca:85:e7:ef:3e:f0:04:d3:21:66:58:eb:
8b:63:7b:33:43:1c:51:70:d4:f8:8d:a9:3c:04:e1:
70:bd:76:83:f3:ce:29:46:e3:f9:ba:d0:10:aa:f4:
00:38:f8:ce:16:25:e3:cf:ab:8d:82:1c:31:a4:b9:
86:bd:c7:ed:c2:aa:55:1b:82:dc:cd:5e:b7:e8:7c:
50:f7:21:60:c6:89:48:5d:4d:32:dd:74:0a:2a:96:
b5:1e:82:fc:c5:a0:7e:df:cd:34:aa:59:18:0e:6a:
f9:91:c8:64:6c:f7:f1:3f:a6:19:e0:29:54:1b:1a:
ad:bb:a6:98:2b:6f:af:6e:ef:c2:a6:e9:ea:47:f2:
bd:22:46:ea:24:bd:bf:fd:14:12:48:6f:b3:b4:d1:
f6:56:4b:39:c1:b2:eb:33:93:3f:f3:f3:1d:ed:3a:
4c:c7:35:56:16:e5:5d:50:83:ca:6b:ed:42:d6:bc:
a6:58:26:34:f6:71:72:ee:f1:2b:c2:13:96:e7:1c:
03:17:e5:51:84:bf:45:36:b5:b7:ac:3a:37:9a:44:
64:4d:ff:c5:83:40:f8:36:16:82:5c:cc:92:de:18:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:72:8D:83:77:99:BF:E2:19:95:B6:8E:85:74:96:00:7A:9D:6F
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:b2:3a:76:3f:ea:46:73:b2:1c:7a:42:a8:7c:5a:25:2d:
67:e6:54:f2:81:3b:6e:a7:83:6f:6a:82:19:f9:92:20:25:0f:
3e:b5:af:b3:90:8b:7c:2c:c3:92:6d:3c:94:2a:a6:0a:78:9b:
90:fe:45:20:e5:95:08:e2:60:a2:ca:92:3d:f3:97:06:3d:a5:
68:26:2b:01:17:c1:e7:66:eb:41:da:9b:63:af:c4:05:57:a7:
0c:88:a2:8e:44:97:0d:01:45:63:b6:6f:d3:db:f0:c6:51:4d:
b7:32:58:c6:de:58:66:84:55:94:db:98:d7:e5:f8:ed:8d:6f:
05:c1:9d:28:4b:76:64:eb:75:81:97:b2:b0:82:03:3e:91:bf:
0e:6c:0a:92:ea:91:0c:34:c5:af:08:a9:83:13:51:dd:5d:fb:
cf:3d:7c:c9:44:8d:cd:eb:7d:28:51:0f:c3:27:5f:97:d5:a0:
f5:f0:76:7a:de:7c:c0:c5:48:17:c7:9b:7a:a2:15:b4:69:74:
34:a9:85:91:76:c2:85:84:1d:d2:64:d4:d5:bb:d5:d5:2c:e0:
2b:61:51:17:eb:e4:b5:0d:fe:a8:a2:71:c7:b9:9f:18:d1:c9:
b5:9a:91:17:01:d7:85:10:24:6d:d6:06:74:c2:34:aa:91:22:
6d:8a:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:04 2025 by rpki-client