Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json)
Hash identifier: mu4/UWSf4G41LtgmdDpu35A2QkSSmrz+sMSzS2JODX8=
Subject key identifier: 1B:E8:1F:76:6A:3F:D5:A4:BC:17:EB:8C:21:69:28:00:3C:C4:58:4B
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0198D5F1B34227119ACD38256832E7165C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
Manifest number: 0995
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=)
2: 35WlNYoicXeTaUW3mWXsagVOnPc.roa (hash: vhlE4c9NYewGiei7QNQOzx0MpfEcyu07VzFHTp1o4sI=)
3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=)
4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=)
5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=)
6: HW2dcLN89k4ArKIlM489cySLrIc.roa (hash: xRLyuZH/FsCW9eRIYX2cy778ZaUrTm31p74Knx3Fus4=)
7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: 591wy5bhL7oX0+fFieC0zM9b4IvJRM0BRGhXTWSU/l0=)
8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b3:42:27:11:9a:cd:38:25:68:32:e7:16:5c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=1be81f766a3fd5a4bc17eb8c216928003cc4584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:3c:74:f9:c2:58:30:75:bf:df:7f:87:a8:
bb:0d:eb:13:ca:fe:84:9c:30:cd:0c:53:f2:09:65:
82:31:b0:a9:d6:65:4e:4c:8f:80:79:5d:79:5f:55:
25:3b:c6:7e:57:8d:17:75:53:2f:30:ab:b8:82:26:
32:dd:17:05:35:66:15:0c:61:d5:c3:dc:21:61:3f:
10:61:7d:58:7c:ff:24:4c:6e:9b:7e:d4:99:f7:67:
17:65:ee:5a:0a:9a:c0:db:60:f8:9a:67:4c:97:6d:
7c:8f:a7:6f:f5:2d:12:76:2f:a3:6d:51:6a:33:8b:
c8:f9:08:fe:46:53:c9:e1:75:ef:98:bf:ea:4c:0e:
10:cb:7b:e7:51:71:2a:1a:11:43:7b:de:42:88:4b:
c8:2b:9c:c8:ca:43:6a:77:f4:7a:aa:7d:ac:db:53:
22:fd:4d:73:fa:98:37:4e:98:08:c7:cd:2d:ff:d5:
3c:ee:49:8e:1c:49:41:e5:a8:7d:47:51:9b:89:62:
f6:bd:43:e1:e1:ee:56:3c:6c:14:18:04:a9:32:00:
80:84:9c:80:e7:1e:59:d2:33:82:91:94:60:d7:fd:
0c:ee:e7:9f:ff:b5:c7:23:a7:e7:71:37:b2:b1:83:
6a:65:4e:c9:fb:72:33:4a:5f:05:55:09:53:51:4b:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:1F:76:6A:3F:D5:A4:BC:17:EB:8C:21:69:28:00:3C:C4:58:4B
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e7:cf:0f:ad:65:12:d4:28:b9:c3:b8:52:f3:7f:9f:34:b7:
8f:6a:1c:5e:c1:13:11:e5:04:a1:b3:89:a0:cb:9c:32:7a:38:
2b:00:9a:72:6e:5f:75:21:64:7f:00:23:a8:35:60:1c:2e:22:
e0:c8:69:1c:4a:ce:11:39:68:cc:21:db:15:33:69:97:9b:b5:
a5:33:e3:d7:f5:84:e7:7b:78:a4:a5:8a:b9:c2:56:66:5b:af:
6e:04:17:63:27:0d:00:0c:0e:fb:18:a1:77:d7:81:cf:ad:72:
97:fe:ee:b4:b8:64:e9:5a:f9:b1:95:60:39:38:bd:1b:85:1b:
aa:60:a5:3a:fc:ce:96:6b:8a:2b:c4:6e:24:ee:26:a1:1a:b1:
2c:eb:a1:fd:89:f7:f3:b4:e1:ba:e3:99:b4:f9:9b:38:1b:2d:
0d:77:5b:86:92:96:c3:58:98:f2:96:c6:12:a0:65:02:aa:a2:
cc:82:81:a6:8e:21:40:73:85:4d:2d:2d:0a:05:21:c9:73:fb:
35:4d:2b:78:57:2c:eb:b9:84:27:b1:20:a6:a4:ed:d6:a6:b0:
66:ae:25:54:98:b4:ce:99:f1:89:29:ba:c6:cb:b1:ac:d0:dc:
de:c8:af:c4:36:16:ab:9d:f1:14:a6:7b:1b:80:a4:1e:5e:8b:
b6:e5:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:47 2025 by rpki-client