Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json)
Hash identifier: 88U66b8ViKHa5oMJ6PuFowd5lbSaTcMDjixykvQ4z6g=
Subject key identifier: D9:ED:8D:7F:B4:84:9D:3E:99:9E:C1:60:DC:65:F3:E7:47:53:DD:F0
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial: 0198D54DDB3EAE9E61BC4E8A2F6105B2FBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
Manifest number: 136A
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: 4OlXHZjPNi_ZrlyOHLrnACz2H5w.roa (hash: WcKTWMqR73pqlk4NefweGCzhLoO2KaXXmg8w4iimJxY=)
2: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: ihvFUUg7biNKZQIq+bQpgmKPVRA2jG8jsJoiZFO15ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:db:3e:ae:9e:61:bc:4e:8a:2f:61:05:b2:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=d9ed8d7fb4849d3e999ec160dc65f3e74753ddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:c5:70:1b:5c:67:10:69:3e:fc:41:3a:e5:
12:b9:c6:5b:06:a9:c3:31:6d:81:ee:26:60:ac:db:
5c:ac:61:df:80:b0:57:2d:23:8a:22:26:4e:86:e6:
87:1a:90:88:39:ed:80:5d:68:38:1c:29:44:d6:3b:
06:4d:eb:a3:c2:d7:81:a8:f7:d6:68:eb:b9:32:c9:
58:0d:bc:1b:97:db:ca:53:4d:dc:f6:ae:64:73:0d:
12:10:da:1d:52:d2:67:0b:00:5c:c1:33:1c:46:7e:
09:11:54:9b:b8:7a:e9:d3:43:8c:f4:14:6a:7c:54:
0a:64:d7:f5:df:c1:89:4e:d8:37:50:2a:e2:60:af:
4d:42:52:a0:51:f9:63:42:b3:7f:6f:05:ce:0f:1c:
1c:e3:fa:39:90:ab:44:25:94:6e:61:93:82:f8:64:
44:64:8c:68:45:72:b6:07:fd:ee:b8:1b:d7:c2:83:
d3:da:fb:f4:8c:3c:c0:e3:21:9d:c3:91:6f:a9:f7:
f7:fb:51:5d:b5:68:2c:9b:e6:ce:1e:d6:60:1a:75:
70:21:71:6f:d4:0e:6c:15:cd:99:12:90:aa:d5:27:
e9:f9:1a:01:10:62:16:cf:91:b5:e6:aa:58:39:68:
ed:8b:25:43:73:ef:ab:49:d3:9b:25:05:c6:42:50:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:8D:7F:B4:84:9D:3E:99:9E:C1:60:DC:65:F3:E7:47:53:DD:F0
X509v3 Authority Key Identifier:
keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ab:8d:76:a3:85:47:bf:14:67:39:d3:b0:55:18:8a:43:cc:
2f:e1:ab:fe:9a:84:9a:78:64:8a:36:99:d1:fd:0e:20:6d:bf:
48:1d:e3:8c:70:75:7d:78:40:90:2a:96:d8:4c:a5:52:37:86:
6a:e1:9d:85:e1:83:78:b9:03:b4:dd:cb:7d:09:4f:8b:69:29:
e3:20:78:b0:dc:8d:8f:6c:76:9c:5d:50:38:15:df:a1:bd:23:
3c:89:6c:39:c0:61:11:f2:39:d4:1d:c8:01:eb:d0:a5:4a:52:
05:51:8e:07:b9:a3:cc:48:bf:db:54:cc:3f:33:4d:a0:4e:b6:
3e:dc:54:92:f4:8f:54:a3:e8:0b:47:71:ff:bd:de:19:ad:82:
b9:5a:94:0a:d3:43:7b:9d:12:c4:b9:f8:8d:3f:d1:5c:1f:ea:
70:a0:b0:1a:7c:18:c4:7a:40:79:25:5b:6e:d1:47:fa:5e:18:
37:53:86:1e:42:8b:7d:b7:55:e4:0e:c8:4f:43:b5:d1:f5:5f:
04:c2:de:1a:7e:6e:51:51:71:c6:10:62:0d:ee:e1:0c:73:f9:
17:a6:8c:f4:fd:55:d4:70:f8:c8:a4:86:13:52:7a:62:0f:68:
67:51:b4:45:e8:42:4a:3d:ec:fd:18:33:49:77:d9:52:21:de:
92:84:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:24 2025 by rpki-client