Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: THEQiN+O03ouELa6wtNgpm6aDWM//+eMZ64mHkXAyaI=
Subject key identifier: 2C:4C:67:EF:84:21:BF:69:86:25:3D:B4:D7:2E:56:16:50:7A:24:8B
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 0198D472C0C4689D0F33DD93EBA2D7CBF926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:26 +0000
Manifest this update: Sat 23 Aug 2025 01:02:26 +0000
Manifest next update: Sun 24 Aug 2025 01:02:26 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: MiwWymP9l0DONCMfW/8UOZ83oHuKqXM8ej7Uh/ZlCGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c0:c4:68:9d:0f:33:dd:93:eb:a2:d7:cb:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Aug 23 01:02:26 2025 GMT
Not After : Aug 24 01:02:26 2025 GMT
Subject: CN=2c4c67ef8421bf6986253db4d72e5616507a248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:ba:60:3c:47:cb:fe:e5:86:76:32:f3:f2:
29:b9:8a:70:78:d3:8a:5a:cd:69:7b:db:40:cd:5f:
98:69:2a:82:e7:48:e6:4a:63:0e:67:76:c8:70:0a:
3d:9f:5a:80:1a:9e:39:5d:70:0e:ac:5c:69:5d:d8:
f7:07:2c:41:f4:34:13:4c:49:c8:78:cf:14:a4:d5:
e7:5d:28:1e:23:57:00:4a:4b:6d:d5:51:40:84:ed:
aa:1c:f5:7d:1f:35:30:e8:8a:9d:1b:fe:92:b4:54:
fd:5c:9f:fd:d4:5d:d4:d7:9c:14:19:24:92:57:b5:
6a:7d:29:c5:c7:34:dc:ed:2e:0b:bc:ce:58:07:ee:
8d:b7:c8:7e:e8:52:9b:67:0d:e7:b6:01:b5:76:1d:
79:93:0b:22:21:9a:82:25:75:ac:60:47:94:00:ac:
83:af:af:a6:14:f9:a7:2c:d6:90:be:5e:05:a3:cc:
50:cb:d1:c7:14:29:93:66:19:00:5a:33:4e:d4:14:
44:9a:55:b2:ed:8f:5f:b3:92:a9:51:9c:77:8e:71:
6a:6d:de:31:d3:e0:d4:bc:41:bd:50:5e:88:51:23:
8f:44:70:61:92:fe:ad:2c:32:1f:90:22:70:67:27:
8a:ac:f5:7c:0f:2f:e0:0e:3a:44:0f:d9:82:db:0b:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:67:EF:84:21:BF:69:86:25:3D:B4:D7:2E:56:16:50:7A:24:8B
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bb:64:3f:d7:f6:22:9c:13:6f:57:83:d3:3e:8b:fd:9a:ab:
f9:bf:49:a1:ad:3c:b6:51:13:07:b4:c8:48:01:44:4a:e8:c6:
ae:95:d3:49:60:4a:82:e6:8b:de:cd:9c:97:06:a4:c0:7e:a6:
d3:9f:f4:54:78:0a:c3:5f:cb:fb:63:b8:52:5f:8b:27:3d:e5:
dd:46:c9:df:4a:a4:cb:b3:34:3d:85:70:ca:45:0c:8b:a5:e9:
b9:96:b3:29:43:ca:ff:e9:d5:2c:99:c5:c8:e4:f3:d9:73:cc:
54:d2:5a:fb:bc:2f:77:06:f2:09:e8:ff:16:93:ca:54:6a:f6:
1a:ab:54:12:ea:3e:02:21:ef:14:80:0b:f3:7e:27:14:06:5b:
2d:33:0c:a7:a9:ae:81:04:84:43:a8:4c:8c:5d:b5:9b:85:7b:
3e:e7:3f:09:ad:4f:d5:29:cb:c4:9f:b6:49:ca:26:ee:a6:b0:
ef:2e:09:2f:7d:16:38:d2:4c:d4:ac:af:35:a0:39:ce:b0:d8:
0f:59:50:b2:dc:4b:35:b2:f9:09:6e:31:61:c9:f4:94:7a:c5:
88:4b:33:ce:29:ae:b2:43:16:c4:89:f6:2e:e9:b1:40:8e:d6:
8d:07:88:82:d0:34:d7:a4:da:46:74:fd:c4:33:b8:51:cb:b1:
ac:e9:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:28 2025 by rpki-client