Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: vQ3r4bB5/xa40lWFWLFbaUGDHI7ivxOXnODc8IPIR5U=
Subject key identifier: F9:BB:2B:7F:AD:26:E2:6C:7F:D1:A4:A3:1D:9C:4D:5A:73:F9:98:0F
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0198D54DE5A30248B9864E52823B0F7FE347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: v4L/kqnZKIJvnTUyzJtjnecknJSH1pvEp8G8VGuRF4k=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e5:a3:02:48:b9:86:4e:52:82:3b:0f:7f:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=f9bb2b7fad26e26c7fd1a4a31d9c4d5a73f9980f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:b5:0f:3d:8e:96:9c:d5:5c:9e:f3:17:56:
7a:66:4f:30:55:84:de:85:7b:c8:3c:a7:e8:50:4b:
be:66:02:8a:4e:0f:74:b3:d4:28:ff:bc:69:3c:11:
4e:0c:c5:e8:2d:27:89:76:d7:96:0a:40:00:b2:e4:
da:8e:59:34:5a:b6:0a:1c:ab:b5:84:0b:1a:c0:69:
51:63:34:d8:de:59:ee:9e:17:10:ab:ac:30:21:dd:
08:5f:80:d6:16:cb:55:b0:85:8b:cf:fe:97:27:0e:
d7:15:7e:64:4c:91:12:01:20:2f:7e:49:f2:0f:6e:
0a:ee:eb:87:c2:ea:3b:89:d7:91:97:d3:b7:4d:ce:
e0:3d:9f:52:d3:9a:d1:2c:75:36:c7:68:d1:1d:b6:
42:08:00:68:71:9e:b3:dd:26:87:b6:2e:e6:c5:e6:
4e:e5:e9:69:79:70:0e:cc:ce:41:00:9d:90:47:cc:
c8:f6:f5:dc:db:25:08:c2:3c:fd:56:f1:30:06:34:
87:7f:c3:7e:c8:b4:32:1d:a4:5d:01:6e:c5:0b:55:
cc:79:c8:03:d4:c7:38:c2:67:95:bc:5b:07:bc:6d:
d2:b1:6e:38:e2:ac:49:45:4f:db:63:7d:5f:0b:db:
88:60:33:70:1d:74:3f:42:46:2d:f2:b2:02:ee:a8:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:2B:7F:AD:26:E2:6C:7F:D1:A4:A3:1D:9C:4D:5A:73:F9:98:0F
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c9:35:18:b4:87:48:4b:fc:b9:e9:9a:7c:df:93:7e:cd:ce:
5f:0c:75:20:ef:8b:e1:9f:c4:7e:cd:c3:ce:31:81:e2:d5:7d:
32:e2:1d:af:04:90:d1:0d:11:d1:65:9b:6e:7d:72:02:47:3c:
29:cd:5b:fe:14:02:21:c0:d8:5a:ce:94:64:fb:3c:63:d7:d3:
ba:9e:b7:b8:1d:0a:d3:9e:23:b0:d7:e9:39:c9:72:3e:15:ef:
77:62:fc:1c:eb:15:5f:b9:79:63:bd:b0:38:0c:b3:e3:46:57:
80:c9:90:35:63:87:75:32:1c:53:f7:3d:b4:8d:ae:49:43:5e:
94:66:56:3e:a8:1b:bf:8f:56:09:4a:28:d4:e2:94:ee:e3:b3:
1a:9b:7d:6c:0e:d8:cc:51:79:38:d7:58:be:c6:80:cd:8f:00:
d8:3c:95:4a:0a:b4:c3:cb:6b:3c:b9:95:f7:e6:05:38:a4:86:
c8:70:85:b2:5d:1d:7c:7f:78:59:be:f0:69:ce:6f:99:4e:a0:
28:9b:7a:6f:f1:0c:fe:3f:8e:5f:4e:0c:9f:fe:7f:ea:92:bd:
3f:6f:7a:0f:6e:23:b5:76:1c:e7:a8:c3:f2:64:96:aa:a9:be:
b6:82:2c:98:07:68:0b:71:89:3b:45:4a:9f:51:6b:ae:f0:85:
29:1d:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:19 2025 by rpki-client