Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: yVS40I5FTOvUzOHgOKmQU4fzRan/EZZnG/AhtB8Za+E=
Subject key identifier: 31:C9:AB:E4:2F:16:51:1B:67:7D:DA:5A:2A:E7:72:92:14:87:FC:1F
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 0198D5838D9248370DBD576E612E74A3F310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0CF1
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: 8A9ebiDgjUYZIpVND4VvjpPtzLv6fPIR9pBQJBMcXOs=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8d:92:48:37:0d:bd:57:6e:61:2e:74:a3:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=31c9abe42f16511b677dda5a2ae772921487fc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:e8:11:b5:3c:11:c8:1f:33:f8:b2:66:96:
04:da:3a:94:4b:b7:61:39:25:8d:80:b1:b2:94:50:
c8:ea:cb:7f:ed:87:af:c7:41:fb:0c:8c:e9:27:5a:
18:46:3c:65:80:b8:d4:1b:17:1c:ba:bb:1b:d3:2c:
c6:f1:19:9b:f5:09:03:be:57:b7:20:8d:2a:59:c8:
13:36:0a:77:71:a8:36:9e:27:b9:18:d9:fb:2e:b3:
db:25:be:b0:95:10:71:a3:f4:20:be:bb:36:e7:51:
3c:a5:c4:05:2d:0c:14:34:50:b1:65:14:2d:ef:c4:
5f:6f:55:ad:95:41:95:57:3c:d6:4b:2b:4c:73:60:
82:29:0d:34:33:3e:f9:a6:67:cf:a1:de:54:8b:11:
02:90:4b:41:cb:d3:80:16:99:f4:19:22:47:1c:54:
e0:ef:47:69:49:d3:fe:2f:6d:d9:d4:17:97:00:2e:
ba:17:03:66:87:5f:50:f2:a5:03:09:99:fe:72:90:
04:0b:0d:76:de:64:0c:dc:5d:43:25:e1:a2:6f:cd:
60:41:7e:42:aa:f9:03:f2:26:e1:52:20:10:b6:6e:
f0:d0:f4:43:47:f4:d0:59:6f:90:67:1f:ea:93:40:
af:9d:bf:a6:4c:0a:2f:20:00:15:f6:cc:15:26:1a:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:AB:E4:2F:16:51:1B:67:7D:DA:5A:2A:E7:72:92:14:87:FC:1F
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a9:80:31:04:81:cf:22:54:9e:31:7b:7e:5a:66:73:68:89:
07:a5:29:90:0d:30:34:69:44:1a:f1:27:4a:bd:1a:02:4a:1f:
1a:34:15:95:fa:25:12:87:ba:a0:b6:cc:8e:ac:89:72:f0:1a:
95:74:a6:ed:c5:39:fe:0d:86:31:75:42:14:db:34:07:85:bc:
39:54:28:60:c4:10:78:c2:f5:a1:77:f8:b7:8a:d1:97:49:b4:
54:00:7a:c9:06:e9:8a:1d:ae:fb:d9:e1:a3:a1:a2:66:aa:b9:
fd:18:61:39:af:0b:9e:1a:ef:94:85:70:3a:0a:6d:fc:18:53:
7f:2f:3b:39:19:a5:77:3d:55:30:08:d8:7e:7d:5e:d4:cc:f3:
41:ca:f8:08:3b:57:50:ac:0b:27:77:d9:44:69:d3:b0:3d:47:
b4:65:f4:22:dd:b1:7b:05:24:17:37:8e:87:dd:7d:87:ef:51:
0e:e9:57:f7:b9:ff:b9:c8:d1:29:90:c1:3b:36:85:48:13:ee:
56:af:ec:ba:f1:5b:f9:5e:6f:9d:19:4c:f4:a2:6c:77:b5:96:
e3:80:35:08:e8:18:a9:2b:16:ac:fa:8c:4f:fe:85:2c:a3:b8:
a3:b7:6b:3f:c2:d3:34:39:60:ef:b8:87:f4:a8:c7:a1:4f:d8:
df:ff:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:24 2025 by rpki-client