Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: gJT06wszOCxCN/RxUlshVF1FGHwt9opyTGobt3xfV1c=
Subject key identifier: 99:46:A3:77:F4:51:D6:6E:41:24:0D:80:EE:BA:26:E0:8C:22:80:53
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 0198D583A734AC6DE34658B6D61B05090AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 1320
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: QfWo00KUcYlfclXon8zZKzPhDS9JJ9ZgJhueW8+4+cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a7:34:ac:6d:e3:46:58:b6:d6:1b:05:09:0a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=9946a377f451d66e41240d80eeba26e08c228053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:90:84:cb:49:63:b5:15:a1:87:af:bf:35:
84:2d:68:3d:71:77:2b:0b:1f:bd:f0:07:10:8a:88:
27:b4:7f:11:02:85:95:6f:20:60:6b:1b:8d:49:70:
45:54:cb:0e:8a:db:0e:76:2f:db:e3:33:d3:b2:b4:
ff:95:d9:34:1f:52:f3:a0:b4:3c:14:b0:cb:21:f8:
ef:cd:e6:a5:8e:ca:8b:51:26:ed:18:32:65:a1:47:
cd:99:59:bd:a6:52:65:97:1c:2c:8a:8e:7f:f0:6a:
7f:37:44:ec:22:60:5a:5c:5f:c5:da:c7:8b:3b:f7:
c6:77:a9:54:12:47:4e:27:85:78:06:98:ab:93:05:
d7:3c:ec:55:3c:57:c3:33:3d:7b:06:4d:a7:1c:92:
e0:92:12:88:38:67:74:a2:8c:77:a0:38:4b:19:e9:
8e:c6:12:c3:45:e6:d9:45:9b:62:be:4a:1b:6b:c9:
56:17:05:48:d5:7f:c6:f4:5c:2f:33:05:9e:b3:1f:
cb:e7:04:91:b2:29:34:0f:71:c4:15:32:f9:00:c1:
f2:45:23:62:02:3e:00:87:b8:23:d7:bb:09:b9:e5:
bd:67:d2:dc:47:be:b1:a9:94:0e:21:40:d7:b1:b6:
69:bc:c2:4a:c8:43:ae:dc:07:88:92:f7:fc:08:97:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:46:A3:77:F4:51:D6:6E:41:24:0D:80:EE:BA:26:E0:8C:22:80:53
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:33:5d:5f:40:c7:fd:82:df:ab:2f:a8:ce:3c:e8:ba:dc:d9:
c4:87:3e:58:10:6f:fe:4a:8b:a5:77:f4:7c:b9:8c:15:1d:0d:
16:83:83:c3:a2:87:a4:a5:76:a8:f1:6e:aa:95:26:d5:4e:74:
dd:ff:1e:d0:c4:49:12:0b:00:e3:9b:2f:15:3d:33:f7:53:8b:
77:f4:89:13:cb:f7:53:af:47:32:f8:eb:7b:69:7e:a9:4d:5d:
65:a0:62:32:ec:62:e3:0d:9f:ed:e5:ac:c3:4b:6d:fd:c2:90:
33:ff:be:be:e9:9b:b1:0e:e4:5d:42:cb:7d:14:93:97:ad:ab:
db:81:ab:d1:f6:01:c9:5a:3b:ce:99:ae:8e:6c:a2:e6:0c:bb:
16:6f:9c:0f:99:ce:00:39:0c:92:78:40:35:47:0c:55:98:7a:
15:f3:1f:99:2b:54:f2:fc:9d:4e:b6:b5:4b:2d:dc:2f:7e:fa:
b8:dc:4c:c3:3a:d6:35:4e:25:76:d1:c5:b0:b4:5c:9e:82:6a:
d4:a5:1d:13:88:09:3f:4c:a3:61:92:3f:ab:43:32:38:c8:3c:
63:fc:9d:67:3c:5c:a2:b2:78:5e:e4:0e:dc:d5:88:76:42:ee:
0e:d2:4b:38:54:51:59:78:1d:21:32:d9:4a:1f:d0:65:9a:6c:
56:4b:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:46 2025 by rpki-client