Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: 8W0jByhsuuV2ZRLtWi8BrG0ewCJY4hBOW0iXDpCThrI=
Subject key identifier: 32:B0:6C:C1:C6:3B:F7:C7:C7:8E:C8:67:05:BF:32:A1:31:59:EF:94
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 0198D4A7AE143E19ACDC99B24F3960E554A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: p+dCCeHSd7oeGvKKnuc+Olm7Hlfk6sRoGzxR1f5XA30=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ae:14:3e:19:ac:dc:99:b2:4f:39:60:e5:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=32b06cc1c63bf7c7c78ec86705bf32a13159ef94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:99:55:21:01:8d:37:a2:57:42:70:0f:43:
29:13:db:44:ec:5d:a7:fe:08:5d:5c:77:fb:60:2b:
87:4d:7a:a3:4f:31:88:f5:14:98:df:ce:80:d1:4a:
45:41:c9:dd:b5:63:02:c1:59:e5:ff:97:c8:fa:53:
cc:46:8a:4f:13:71:63:ef:6a:22:a7:bc:1b:c1:c1:
b3:d2:e8:f9:24:00:df:4d:7a:28:76:0c:e2:30:b6:
1e:95:10:51:7b:97:00:44:15:62:45:83:22:87:70:
1d:6f:74:f4:ce:0c:3e:17:a1:9a:c6:71:da:94:6a:
3c:1c:6a:a7:51:8c:34:d3:b6:7c:a8:e8:ce:80:4c:
4b:5f:ef:1b:b8:af:7b:39:29:97:98:68:37:47:20:
8e:59:a2:7b:d7:39:4c:82:d3:42:d3:e6:05:cd:67:
7d:a5:1c:ab:35:05:c3:21:50:be:e7:dc:c6:4d:7b:
35:af:bf:c3:3b:0c:60:0d:9b:61:4e:30:4a:b5:00:
11:29:71:69:bc:8a:e8:a6:e7:a1:a6:31:84:c8:aa:
4c:f1:61:d4:02:cb:2a:92:58:6a:3e:ec:c5:68:c9:
54:e6:59:0c:a9:75:dc:70:c1:55:51:20:fb:73:13:
ba:49:3c:d4:53:5e:16:c3:0b:3b:bb:7b:9e:08:c5:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:6C:C1:C6:3B:F7:C7:C7:8E:C8:67:05:BF:32:A1:31:59:EF:94
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ae:a9:5c:11:c3:a6:73:4a:31:fe:89:cf:b8:a4:1a:43:12:
82:f3:43:6a:f1:8b:30:d3:5c:0f:3e:2a:b0:40:1c:e1:41:c2:
e5:38:2a:68:61:a3:53:8a:23:e0:f8:77:d6:ff:d3:4c:f6:7a:
88:13:5d:a2:c0:4e:88:4d:12:79:8c:1a:df:8e:d4:74:f2:5b:
3f:b9:f8:4e:d3:c1:22:9a:5c:cf:af:e0:fe:ce:ea:e5:e2:af:
43:55:0d:5d:49:62:50:7a:a9:68:8a:3d:31:1e:f9:48:c5:fd:
61:46:16:f5:69:3a:14:5b:11:61:14:b0:d5:02:53:55:73:91:
bc:06:1f:40:60:cb:ec:73:b4:c0:31:3f:81:f2:0a:a2:bb:97:
22:99:df:32:4d:7f:b3:4f:d8:2e:c3:9a:39:2f:c9:1a:4a:06:
3e:53:c9:da:e9:d4:64:7d:8a:24:da:ff:3c:ab:53:99:98:8b:
b7:b9:24:93:91:cf:8b:f7:81:6c:c6:2b:d7:2a:14:0a:e0:67:
e6:aa:9a:d8:8a:31:97:6a:32:43:e8:52:32:9e:19:0d:2a:47:
29:ac:ce:be:93:15:ff:cc:44:65:b6:1e:ec:d2:56:fc:6e:5d:
43:e3:4e:2e:72:9b:4d:7f:c9:3d:80:53:f4:dc:c5:03:d7:61:
52:a7:03:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:54 2025 by rpki-client