Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: bvg+OCcqOZzxYVyrvSwycP7FMM09c4apvzIrXO3nc2A=
Subject key identifier: 34:1B:25:A8:68:21:A7:B6:F2:2A:1B:EA:F0:96:6F:2F:8B:B1:B0:6B
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 0198D73B8E4040ABFFFC2D57B884BEBA2BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 0759
Signing time: Sat 23 Aug 2025 14:01:01 +0000
Manifest this update: Sat 23 Aug 2025 14:01:01 +0000
Manifest next update: Sun 24 Aug 2025 14:01:01 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: mSdT051hMZTKOswWZaKZ4pKlResaJIKL2mBZJkrP8ks=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:8e:40:40:ab:ff:fc:2d:57:b8:84:be:ba:2b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Aug 23 14:01:01 2025 GMT
Not After : Aug 24 14:01:01 2025 GMT
Subject: CN=341b25a86821a7b6f22a1beaf0966f2f8bb1b06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:2b:b7:9b:20:27:2e:17:ad:e0:dc:ed:1f:
19:35:67:c7:d8:cc:97:cc:a5:e8:1f:45:90:9e:8c:
ea:a4:e8:a1:65:d6:ad:d9:5b:62:94:62:3c:6f:b7:
d5:5b:cf:52:17:87:e2:48:d5:60:2f:72:88:1a:9a:
fe:54:ae:bb:df:9f:d8:0f:b3:64:ca:54:74:1e:18:
5b:a7:2e:4f:6a:b6:a7:6b:1e:b4:51:cc:48:83:03:
c9:ba:9c:f1:1b:7f:dc:eb:16:94:87:eb:5d:bf:b0:
d4:7d:1b:c7:cd:49:32:60:5c:30:bb:47:99:a6:a1:
5a:33:16:ea:d0:cf:d6:59:7a:26:0f:a7:a0:fa:3d:
e2:cd:83:d9:2c:f3:c2:30:bd:0f:74:8b:8f:58:36:
85:30:4d:fb:41:54:35:7d:e2:da:46:88:be:f5:90:
2f:bf:bc:74:dc:df:58:db:bf:ae:71:48:74:01:2a:
c4:47:60:b4:2b:43:65:7d:ad:2a:a1:b5:dd:51:af:
ec:f1:ff:26:a3:8e:36:16:0e:5d:33:d7:aa:19:64:
b9:99:2b:ac:e4:54:98:49:c9:c1:90:22:1c:a4:c6:
43:58:52:0b:87:ea:b2:06:8a:a9:d0:47:83:2e:9f:
da:5e:e0:a4:a1:2f:67:ce:7d:e5:ef:31:31:fd:60:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:25:A8:68:21:A7:B6:F2:2A:1B:EA:F0:96:6F:2F:8B:B1:B0:6B
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:ad:2e:53:8f:cd:cd:a6:bb:6e:99:3c:8f:03:c0:64:90:
3d:ea:c7:ea:1c:be:87:24:4a:86:42:f4:c9:02:0e:e6:48:79:
19:28:e6:d3:f7:d5:1e:28:2b:1a:81:15:7b:a2:50:8b:a3:d2:
8f:10:87:e6:8d:29:51:6b:2b:8b:80:04:8a:6a:b8:97:23:d9:
54:bc:c5:af:47:b2:8f:19:b9:28:c0:29:c2:09:7a:85:48:1b:
13:a9:4b:5c:ec:d0:21:1a:69:2e:52:b7:c2:6d:7b:ad:10:71:
38:ba:f7:ab:d1:45:5b:67:52:6a:f7:e4:09:49:c9:75:1c:20:
f8:12:4a:52:f2:91:9e:e5:77:9a:8f:6f:c9:f4:47:75:07:4d:
13:11:07:68:92:db:8d:2d:29:ba:58:c5:8b:69:42:0a:26:e3:
ea:4b:99:63:0c:1f:00:82:a9:b1:f4:a5:e0:38:43:14:6a:6f:
21:a7:aa:f5:98:90:ca:28:f0:42:15:dd:70:45:72:c4:5b:cb:
e6:95:09:1d:92:ed:9d:e8:27:94:c2:be:8e:a5:a3:98:cf:0b:
7f:15:3d:f5:8f:dd:27:43:8e:53:1a:22:75:05:1f:2c:98:35:
35:f6:a5:f9:3d:58:fa:48:ab:68:dd:69:81:c0:77:62:3c:77:
99:f9:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:58 2025 by rpki-client