Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: JmmBToYfVARQ52gmSME3TlvV8pn9ifEBsbJnuFzimHA=
Subject key identifier: 61:B6:F3:BC:3C:65:C0:36:18:48:F1:58:A2:15:8F:A2:A6:CC:ED:44
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 0198D4A783A9C72B292170AEB7D76E58BBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1570
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: Ewom/matJH6mI6QREpyxZZsqwZ0Fiuyx5p4IK37JO9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:83:a9:c7:2b:29:21:70:ae:b7:d7:6e:58:bb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=61b6f3bc3c65c0361848f158a2158fa2a6cced44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:73:cf:85:6e:2e:da:6f:65:8a:96:e9:93:
9d:c4:65:22:61:29:da:5d:9f:34:56:0a:43:c1:e1:
b3:36:25:b8:95:41:4b:3f:46:11:bb:85:29:c8:71:
7c:a7:97:d0:94:96:30:8d:db:2e:82:3f:0a:3b:90:
67:44:4f:6e:67:d3:7d:ba:24:66:d0:e1:a9:0e:b9:
18:55:7e:6a:88:e6:9b:c4:96:54:6a:54:c0:be:98:
dd:69:8d:b0:42:05:ce:a0:ed:48:c3:bd:06:ab:c0:
cf:8e:4a:5d:9e:68:ea:4f:d1:a5:61:63:14:92:31:
b7:6c:66:82:af:c3:04:fb:83:77:40:5b:0f:09:85:
1c:8d:3e:2f:b9:ad:a6:0a:5e:04:db:8e:17:93:63:
c1:56:a9:68:76:93:f1:33:e0:81:06:d2:53:40:9b:
2e:2a:32:19:64:4b:a0:d8:f4:a9:b1:6c:64:19:0a:
0f:de:80:5b:5d:b1:f0:d6:1c:1e:4a:c0:99:fd:1b:
8b:5f:65:f3:39:a2:b3:99:8d:ef:29:65:35:90:9c:
a9:c3:0f:00:2e:66:06:ef:62:02:9c:ac:c5:5b:bc:
e6:b7:dc:eb:62:ac:5f:3e:7a:13:c9:b5:dc:d4:91:
ba:d8:95:24:6a:72:e0:66:d2:54:ad:d4:1f:9f:c4:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:F3:BC:3C:65:C0:36:18:48:F1:58:A2:15:8F:A2:A6:CC:ED:44
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:24:42:b2:86:7c:b5:e4:b9:41:ed:b0:1b:52:33:3b:81:
9d:5d:4a:eb:fe:ac:ca:45:54:52:e2:34:81:dc:da:c4:71:de:
85:9f:ba:b1:f3:45:2c:10:3a:87:dd:a3:c4:34:1e:9c:f0:a3:
20:8a:43:4d:8d:75:a2:5c:2a:00:e4:3a:e6:43:a1:2c:16:f9:
fb:ca:17:00:4d:a3:48:e1:c4:e4:9b:06:78:b9:5c:37:01:01:
05:89:38:b1:21:1e:d5:91:72:12:bb:49:2e:c2:29:12:7a:fa:
6c:72:c3:cf:79:dd:ea:c3:ac:1d:ac:fe:02:52:fe:6d:77:46:
5d:5d:e5:0e:7e:77:8f:50:71:de:4d:1b:e0:61:dc:bc:91:8b:
8a:a3:56:73:aa:f3:56:5f:ac:68:27:d6:05:47:7f:e5:ca:7d:
ad:53:db:80:7e:ea:05:23:e6:87:c6:3e:05:9b:ea:1c:bc:09:
16:ba:ac:24:e9:5a:4a:dc:6a:f2:53:de:69:b3:40:17:5f:eb:
91:ed:0d:9b:d0:77:06:f4:7b:52:d4:cb:16:37:b9:cd:a0:be:
ec:2e:e0:41:33:40:2f:4e:bd:75:96:ff:7e:c4:39:ca:19:b7:
da:1a:92:b5:fb:f3:f6:7b:cc:ed:74:01:3f:29:e0:d4:7f:b6:
54:84:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:55 2025 by rpki-client