Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: Hb5ojfGaFKx3cRRc2DMaaw6trYaEGY/TZ2dD+AzYrrY=
Subject key identifier: 90:35:41:93:E8:70:1A:7F:86:4B:FA:AA:68:94:98:00:2D:77:F1:22
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0198D6606BD2757B097790974DC6C995A7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 0F76
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 1dgDAg2yIKTdJpEv/q7cBwS+qWHYbrpRRXuqVhiTpLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6b:d2:75:7b:09:77:90:97:4d:c6:c9:95:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=90354193e8701a7f864bfaaa689498002d77f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:4f:f0:ee:59:cc:97:d1:9b:1f:f7:46:65:
cd:08:5b:15:9c:83:63:ab:17:94:1b:db:e6:f5:7d:
10:d3:be:31:ac:7a:4e:cd:bf:26:85:3b:0c:88:7c:
d2:bf:d4:3a:87:91:ea:7c:94:8e:14:d1:73:02:33:
80:01:f5:d3:44:cb:19:75:13:68:6e:21:15:a0:63:
ca:ae:aa:69:3f:84:83:72:66:cd:d9:65:24:44:ac:
82:c7:33:08:02:68:d0:b5:20:ed:72:cb:c0:48:12:
3f:6b:1e:61:c3:04:da:83:9f:e8:fa:6c:01:ef:22:
7a:92:e2:1b:22:1d:43:f7:0a:45:d3:bb:86:76:1c:
f5:7c:82:87:71:79:02:f9:a0:e8:95:8c:6a:7d:98:
1f:a5:58:79:56:90:f7:18:a2:92:3b:b0:17:8a:d8:
ba:49:7c:4d:08:f9:28:6a:75:11:a5:ff:25:e4:c3:
5f:74:f6:e4:e8:fd:1d:a4:d7:a3:c0:0c:81:7a:fe:
f6:9b:ee:d3:5a:4f:85:2f:84:ad:48:52:2b:8a:06:
05:9c:b7:f9:ad:c9:99:2e:fb:84:b6:b0:70:2e:17:
93:bf:22:d8:9c:46:3f:02:7e:ec:2a:07:76:43:a4:
f9:2a:dc:06:2c:d2:b7:47:bc:88:ae:aa:eb:9e:65:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:41:93:E8:70:1A:7F:86:4B:FA:AA:68:94:98:00:2D:77:F1:22
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f3:19:84:62:30:c9:cf:f9:39:42:3d:1f:be:2c:8c:1a:2d:
b6:e1:73:8d:77:04:d1:28:d1:33:4d:71:e7:18:56:f0:8a:a0:
44:17:66:de:0a:2e:ac:d7:08:d2:8d:7d:e4:aa:0f:8b:5c:3b:
f9:4c:ca:3f:4f:66:7b:67:1a:14:96:23:62:51:d7:c2:81:c5:
61:9f:ba:b3:33:bb:96:02:1c:02:38:80:67:71:e1:98:6d:8a:
8d:ed:d6:65:fb:c0:47:5d:08:0d:10:fe:ae:94:97:a7:c3:93:
38:6d:c1:2d:b5:37:4f:5f:75:2a:e8:e1:8e:db:e9:1e:df:45:
e3:d8:cc:be:f7:3b:62:59:9c:a9:1f:82:ba:ca:b9:77:8c:8c:
46:f7:34:77:bd:68:25:81:0b:9d:fd:fb:9d:f9:51:9c:df:a9:
8e:f6:a5:20:3e:a0:b4:0c:77:6a:d9:8c:e3:85:3d:29:e0:92:
f9:eb:38:a8:93:47:a9:60:aa:3d:2a:69:92:03:f2:49:79:c0:
fe:0d:aa:1f:e8:e9:8f:08:c3:d5:30:f8:bd:21:8c:b5:c5:30:
34:32:76:52:c9:9d:15:ba:fe:b8:ab:3b:b9:47:b0:39:b2:d8:
2f:a8:03:82:55:4f:40:f9:26:03:7b:4a:eb:a2:e0:06:22:f5:
da:c9:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:42 2025 by rpki-client