Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: MJrHVaWeJbTEPSkPo7TsI8wxx7jK7iWASqTtKOWFMpY=
Subject key identifier: 1B:90:94:8C:DB:E3:A6:AB:06:AC:DC:7F:E2:63:9E:62:B1:3C:04:65
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 0198D4A8210232D0FDD807E7A88FF692D6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 1324
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: zQVBsrsKNT3gOfhtISyl6y+KwpTsGiwvOFTpfx7yOCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:21:02:32:d0:fd:d8:07:e7:a8:8f:f6:92:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=1b90948cdbe3a6ab06acdc7fe2639e62b13c0465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:a3:a1:c7:ac:af:67:7f:5a:e2:5e:55:31:
06:b5:67:6b:32:a4:a4:15:11:b1:1a:ef:97:c6:4c:
ff:31:83:ca:e4:1c:b8:be:96:76:12:b8:2b:8d:82:
86:09:f4:6f:ea:86:d1:0b:cf:ac:bf:27:c1:d8:7d:
9d:cf:70:75:ab:1f:43:b8:67:2e:58:91:67:57:cf:
fd:70:21:0b:6a:8b:17:3d:1c:46:29:0e:44:bb:50:
6e:44:63:60:95:dc:56:fa:e2:d1:b4:d4:01:0b:ff:
7b:fa:b2:17:ab:e4:09:b8:ac:fe:a1:ab:d4:a1:dd:
e2:be:ed:fa:fe:ca:c1:11:a4:61:6c:82:47:c6:c9:
66:57:aa:bc:6b:8f:4f:67:83:f9:e8:2b:4a:25:b8:
e1:1b:aa:fb:b5:7e:47:64:3f:22:24:8c:d0:97:81:
72:54:31:57:b5:2b:08:99:22:14:36:ed:1d:32:36:
a1:cf:68:c5:ae:18:03:5b:b5:f0:d7:9d:15:bc:09:
82:48:c0:1e:18:6d:4e:c0:ea:6d:81:e8:cc:a5:c0:
9c:a5:7b:b9:04:04:5b:ef:2d:cc:b1:f7:ef:3f:ac:
7b:36:5b:53:b5:db:bb:d9:c9:06:dc:87:af:80:02:
2c:bb:4b:10:5c:b2:a0:c4:b7:73:da:7d:6c:9c:11:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:94:8C:DB:E3:A6:AB:06:AC:DC:7F:E2:63:9E:62:B1:3C:04:65
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:02:c7:7a:f1:f4:8a:0e:7b:c8:fd:5b:49:b3:45:97:ed:a4:
f1:c1:4b:14:fe:fe:55:74:40:87:33:a7:dc:94:b9:e9:5a:76:
9a:e0:3a:30:f5:7c:1c:89:0d:de:ad:97:14:7d:36:75:f6:cd:
37:92:ca:3d:49:7d:30:4d:c7:18:24:7f:15:1c:fc:29:01:2b:
f2:a0:ad:58:5d:86:ca:e4:ba:77:34:cb:12:f7:0f:4c:92:db:
0f:de:f1:df:9c:e1:a1:de:66:22:ed:f2:3a:89:88:6b:31:4a:
ed:59:58:98:a2:a2:2d:1f:0c:44:97:f1:3d:a6:f0:2f:04:85:
a8:c1:c3:75:31:1e:99:ee:69:88:31:fd:81:ca:21:37:13:3c:
fd:01:e6:ce:55:e5:fe:08:8b:0d:3d:78:2e:85:9f:46:70:61:
33:63:66:45:47:9e:dd:85:c6:74:fd:81:24:a2:04:ca:28:8a:
bc:cb:9a:33:1e:90:f3:b1:d0:6e:00:2a:0a:ea:fa:13:df:04:
cd:7c:c6:fe:85:53:ca:1a:7e:a5:7f:49:8f:50:99:67:36:23:
5f:9f:44:87:75:ea:9f:cd:bb:38:25:a8:17:1d:7c:17:4a:db:
93:fe:d1:51:03:10:bc:49:95:a6:1e:e0:4c:16:b6:ab:8c:e5:
7c:fe:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:10 2025 by rpki-client