Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: Bo2qMqCdyYYTIqK5e48wHoszK1PpVlNzR7MvDC4ERAE=
Subject key identifier: C7:89:25:6A:D2:14:A0:BF:3A:A9:3D:3E:F0:9A:1F:C2:72:E1:EF:28
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 0198D6980D722D65EAF16210A54A42A827B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 02C4
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: /1Ak5MwKYKZTjwKSCTLkEMij2LKMsTGFoLmx/kQ/DQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0d:72:2d:65:ea:f1:62:10:a5:4a:42:a8:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=c789256ad214a0bf3aa93d3ef09a1fc272e1ef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:31:ae:42:13:6d:3f:0d:4f:44:a7:cb:96:
b5:d5:43:ea:3d:78:4c:94:2b:26:f4:c2:79:36:8a:
3b:c6:40:85:77:19:d2:a6:23:aa:9b:dd:94:47:e5:
ce:89:3c:62:15:4b:ff:77:9e:3e:be:76:af:55:2b:
4e:63:b8:42:17:ab:40:99:17:82:08:5f:66:81:3e:
92:3f:b3:b9:84:17:ab:45:e4:25:8f:7e:d3:1a:37:
63:e7:04:11:e9:42:1f:79:95:ec:9d:4a:59:78:41:
9e:1f:93:5b:11:4c:ef:4f:6c:72:57:fd:b3:30:a8:
2c:b2:05:ec:a7:f3:4a:41:28:6c:3a:e5:f0:e5:e7:
86:e6:4d:f4:f0:2c:eb:6f:eb:67:63:57:2a:36:4a:
5e:42:86:7b:de:03:01:58:c3:09:18:4d:d9:ab:b6:
48:7d:21:03:c0:88:0e:fb:fa:d1:06:9a:05:f9:42:
a2:d9:4d:ba:c4:9a:2a:6e:2a:e3:bc:38:0e:e4:43:
b8:68:29:01:35:a6:66:3e:08:e5:fc:7f:76:6d:53:
de:a1:e7:4b:da:d4:00:c3:6d:dc:cd:b3:fa:0a:94:
57:88:85:b0:55:9b:ed:be:83:34:96:03:3b:7f:5c:
c3:ac:48:88:81:a4:ed:72:15:7b:32:8c:19:29:ef:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:25:6A:D2:14:A0:BF:3A:A9:3D:3E:F0:9A:1F:C2:72:E1:EF:28
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fd:56:a8:70:e6:72:97:9d:36:15:86:df:4c:a3:0e:d5:ca:
68:69:3d:95:b0:0b:89:79:fd:6c:1f:61:d1:10:8f:e4:b2:37:
29:d4:f7:bf:7d:08:69:06:50:38:86:4d:4d:ef:2a:17:57:de:
d9:46:cc:51:c9:40:5f:09:47:47:7c:da:5a:2c:0d:ef:70:b4:
38:90:d6:91:63:db:d1:12:b9:14:ba:a5:3b:41:c3:b3:4f:8f:
ef:83:f4:2d:61:42:16:36:b0:a3:5e:0b:3d:ba:ea:76:c9:d6:
d5:f3:b6:aa:44:1f:c0:f2:cf:69:06:2b:8e:60:e8:cb:0f:72:
93:20:3a:93:a5:16:98:40:57:b2:c6:57:71:96:78:0f:d9:aa:
82:c1:c5:2f:1d:99:4b:82:a4:f5:eb:e0:00:db:04:79:a8:ad:
be:fe:38:2a:3d:a0:85:7c:f8:58:38:3e:91:e6:27:a6:a1:7a:
2e:c0:a3:d9:55:5c:6b:00:47:75:80:25:36:7d:3f:60:d3:5b:
6c:4f:2e:84:aa:fc:0d:a4:63:39:d5:4c:4b:42:50:7b:05:62:
c2:6e:42:22:cf:5e:dc:7d:2d:2a:dc:c1:39:f2:4c:28:1e:6a:
5b:6a:2f:8a:27:cb:23:49:72:68:9b:35:6e:aa:8e:20:fb:cb:
5d:65:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:54 2025 by rpki-client