Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: lGdN7Rpl+Um6wMBvVN2IYFDHbP+Fpjzu8Tk1GIxJls8=
Subject key identifier: 0A:9C:C1:C9:84:A0:D0:BA:6B:52:EC:0F:41:BE:2A:57:1F:85:5C:E8
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 0198D58402735BEF842C464C73AB40DC37D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0EBD
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: IHE5xov6nCCp2mRZyKt/VmOekRW7GPLO9kRQWyi2gS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:02:73:5b:ef:84:2c:46:4c:73:ab:40:dc:37:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=0a9cc1c984a0d0ba6b52ec0f41be2a571f855ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:5b:8a:e4:99:c9:d8:cb:96:fd:24:cf:06:
f7:38:60:0b:ef:09:94:df:88:c0:57:ce:07:62:0b:
96:f6:04:bb:75:fe:13:4e:eb:d1:db:b0:fc:75:40:
4b:54:da:1a:00:fe:13:f8:d3:d5:5a:af:5d:6f:c9:
a3:13:5d:74:4f:ad:30:6d:74:9b:74:92:70:46:46:
7c:49:f7:ae:4f:1f:44:1c:30:2a:d6:c1:7f:ac:05:
b9:1b:78:c3:85:7f:ee:e9:f2:39:b9:c4:2b:38:ac:
da:7a:87:49:94:74:6e:53:c1:68:bf:00:0c:35:43:
bc:ad:8e:e8:6d:c4:dc:c5:a6:d8:01:40:9b:6b:64:
cd:f4:bc:61:e6:86:96:32:76:e3:43:00:d8:62:83:
fa:1d:ee:6a:70:21:75:bc:f2:ac:a4:c0:35:7a:17:
35:ba:31:8e:f6:ac:2b:25:ba:3e:6c:2c:86:81:15:
ba:aa:e4:8b:25:d5:e5:44:80:d1:fe:31:9a:62:6e:
7c:73:53:c6:61:64:11:cf:6f:f5:4d:cc:79:9f:98:
1b:c2:d8:b4:c6:ec:2c:c6:05:75:5a:0a:8d:f3:20:
80:7f:ee:d0:5d:22:bd:8c:de:ae:fc:98:51:36:f4:
2a:e0:e3:30:18:6e:4b:e3:4f:91:87:e5:b6:e7:9d:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:C1:C9:84:A0:D0:BA:6B:52:EC:0F:41:BE:2A:57:1F:85:5C:E8
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e6:9d:9f:83:3e:34:8e:72:bf:d1:91:17:fa:84:e7:c6:33:
db:32:d6:de:6b:c1:9c:d7:11:a4:7f:33:fc:41:32:fa:14:4a:
30:d0:d0:c3:50:04:a0:61:c4:c9:a3:8b:03:70:e7:96:a0:1c:
bc:17:c9:86:0b:e1:d0:5a:7b:2d:e3:46:b6:80:41:11:c4:2b:
fe:8b:7e:86:db:d0:d7:c0:80:89:8c:a5:dc:c5:5e:be:18:dd:
e5:ce:3e:37:4f:7e:6f:13:7c:df:6c:2a:9f:f4:c6:5b:4b:b7:
22:4a:cc:f5:62:d8:7f:3c:f6:a7:85:74:3c:36:4b:a4:d3:d4:
c1:6d:32:5a:10:42:93:c8:9f:c5:67:34:b4:89:f2:0e:d6:2e:
ca:16:8b:49:1c:db:fa:61:98:c7:28:55:74:53:cb:47:4f:b6:
5d:05:7a:6c:f9:fe:c2:93:5a:03:d4:fd:b5:ba:77:c6:e5:68:
fb:1d:b9:6e:b0:71:a4:d9:75:96:34:cd:22:cc:42:21:03:b1:
d9:a6:f9:62:87:dd:c0:83:5d:64:93:37:76:9c:7f:76:b6:5d:
5c:7c:d0:b3:a2:f7:d7:e0:97:cc:e3:13:9f:9f:f1:75:1b:9e:
a8:65:e8:88:3c:c3:a7:56:9e:b5:9c:37:55:68:4d:04:cd:09:
e7:31:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:06 2025 by rpki-client