Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: jpehc8ynjCBY99HVWJhdfgT4cjvtGHQFSG+7hBPe5I0=
Subject key identifier: 10:BB:DF:42:7C:FE:B0:05:C3:D3:36:BC:2C:D6:90:68:15:9B:29:06
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 0198D5F1B4E32D1F387B73CEAB6B0B3D2D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 2E
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: Mg9YzyKViPLRCmePau7npL1lUVMXG0tBNTA4kdSM0z0=)
2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b4:e3:2d:1f:38:7b:73:ce:ab:6b:0b:3d:2d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=10bbdf427cfeb005c3d336bc2cd69068159b2906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:e5:16:ed:3c:ef:9b:b2:98:ac:b3:e6:bf:
fb:ab:90:5c:7d:c5:9d:fe:03:0a:58:5d:0b:48:b9:
f4:b7:49:47:53:d3:96:06:7c:f2:e4:75:c3:90:e8:
2e:c3:36:05:e8:7e:0a:45:a6:8a:47:fc:48:a3:ee:
a7:45:b8:9f:35:b6:5d:fb:f2:24:f5:ac:aa:0d:7f:
88:24:ee:de:8d:46:2a:9c:eb:06:97:52:2a:46:6e:
20:02:8a:74:a6:11:2d:33:e6:01:2c:7e:bc:29:6a:
d6:60:8c:b8:b2:b7:ee:22:79:ec:0a:27:01:99:66:
aa:2c:be:9d:28:3d:be:da:76:c2:8c:34:09:e7:68:
0e:26:96:44:65:8b:96:e4:00:3b:18:b6:4a:b8:9f:
3b:5a:b1:37:a2:03:0b:22:7e:39:78:a9:d8:32:5d:
06:37:83:c2:af:d2:3f:4d:22:96:5c:61:ff:e2:2f:
1b:31:c9:86:b3:f7:6f:6e:5b:ae:bc:a6:b2:30:4c:
e7:b4:62:6a:6d:c5:50:66:03:18:54:c8:c4:dc:c8:
85:f5:b2:17:dd:6a:02:68:dd:12:fb:c1:a9:09:2c:
0e:4d:04:0b:4d:38:8f:81:14:2c:92:84:f4:c5:85:
71:78:92:4a:ce:a2:e3:d6:f0:2d:fc:97:e2:7b:52:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:DF:42:7C:FE:B0:05:C3:D3:36:BC:2C:D6:90:68:15:9B:29:06
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:98:f9:dd:50:ed:6e:90:67:dc:e0:4d:a9:3a:ab:66:04:42:
40:86:c1:fc:1c:dc:73:7b:29:df:d7:e3:53:c2:3a:99:a7:9f:
1d:40:41:d7:b3:65:ab:d8:96:51:25:99:07:8f:bb:ac:c6:84:
61:12:89:d5:07:eb:fc:54:c0:16:79:6a:0c:85:65:25:09:6a:
b2:8d:92:33:51:78:82:0e:f6:ea:91:80:ab:da:b4:5b:7c:ad:
2f:1a:67:05:7b:3d:79:4a:0f:1c:ef:a9:d7:66:1b:96:34:25:
d6:b4:bd:4c:5d:57:51:79:72:cb:e9:ab:a6:d4:87:3c:0a:18:
bc:9e:b3:22:db:63:ce:cb:82:f3:74:a4:d1:84:e0:28:92:1b:
6a:1a:d2:4d:ff:0f:be:c3:e2:22:66:6c:77:45:ed:66:01:26:
90:24:b7:a0:43:f8:de:c9:7b:35:ec:50:bb:41:48:ef:f7:74:
74:b2:23:ac:ab:9c:4e:88:a9:31:08:27:8b:19:b4:9c:3d:70:
ce:c1:8a:53:7c:e4:ac:af:1d:43:bb:1f:74:de:e0:dc:6d:a6:
f0:29:8b:61:2e:5d:b8:d7:dc:8d:30:57:1e:06:82:d7:7f:38:
ed:5e:88:35:d1:6b:02:de:bf:da:a6:14:c0:c4:20:75:fe:0f:
6f:c6:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:04 2025 by rpki-client