Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: oLpvFSKvsMGPnxGpTt0OX8EROlOTDBJPu9jYaKdnxUo=
Subject key identifier: B9:5E:31:A4:95:20:1C:BE:56:B9:95:A6:DA:28:16:4D:35:BA:53:29
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0198D54DF7FA78F0BE15D540041BB2A8662E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 02A3
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: D9dkIaI2L//WPVYnEfjpXuJ19ADKd8WIeDSSFQa/uS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f7:fa:78:f0:be:15:d5:40:04:1b:b2:a8:66:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=b95e31a495201cbe56b995a6da28164d35ba5329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:ba:23:6f:9d:81:b3:bd:50:a0:24:1c:bd:
14:a4:df:21:4e:77:b1:be:4a:20:cc:f7:e0:8a:0c:
16:dd:c4:2c:d9:d9:23:82:14:e4:38:9e:7c:41:c8:
68:86:66:cf:b3:13:46:48:ce:6a:6c:83:a8:ef:40:
c2:e4:90:0a:8c:90:5f:01:72:1a:35:ff:c9:db:b8:
a2:6d:ba:5f:1b:4c:77:46:d7:a9:35:c2:cc:89:c1:
b0:41:9f:ff:f1:b7:25:be:69:9b:8d:8b:a7:c9:2c:
f3:fe:85:12:29:4b:de:1e:fe:37:ce:db:d3:76:6c:
95:7e:a6:52:d2:55:c6:7b:7c:87:78:2a:79:5a:3e:
d3:33:7f:10:00:b5:36:be:27:d3:17:a0:9b:73:81:
36:1f:b7:35:5b:8c:6e:9c:a7:11:7f:4f:8c:bf:9d:
12:39:d4:61:e7:ef:33:b1:b9:4a:35:b5:60:6a:28:
99:13:00:3f:13:bb:99:16:5a:d7:af:1a:1e:05:de:
43:39:2a:c2:ab:29:8c:6d:17:20:00:b9:06:b7:29:
86:f2:d4:33:95:25:bf:5f:4f:ad:8e:af:ac:07:95:
57:80:1d:7c:8d:52:2a:57:ff:52:f5:49:f9:27:80:
15:78:3b:13:03:c5:eb:58:8c:b6:62:71:99:65:77:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:31:A4:95:20:1C:BE:56:B9:95:A6:DA:28:16:4D:35:BA:53:29
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7c:0e:f5:13:bc:16:8a:35:c8:3f:03:d2:70:29:27:a9:a0:
d2:da:ce:86:51:30:65:4f:77:21:f3:93:50:6a:c4:9c:45:e9:
e1:2d:89:63:a1:10:c3:a2:83:fb:6b:40:4a:ed:46:f4:02:4e:
49:ec:59:f1:1a:82:42:a6:3b:6c:f4:90:c8:87:a6:b3:c9:6c:
f4:f9:40:f0:37:cc:a2:59:61:05:74:d8:5f:72:48:4d:51:80:
0d:c6:65:10:7f:77:7a:9d:24:72:e9:8e:f2:b5:1b:91:55:7a:
b4:c9:48:a1:01:33:71:b4:bc:02:40:e1:b3:07:80:84:2f:48:
2b:e9:45:72:82:16:a1:f7:ed:8e:1b:2f:8b:53:1a:50:1b:43:
9a:41:5d:26:c5:7b:6c:2e:3e:bd:67:97:f8:5d:39:df:1a:da:
91:94:42:90:a9:61:51:80:a2:e8:ba:7b:ad:5b:a6:f9:5e:a6:
b9:97:e5:d1:66:2e:bd:9e:b2:83:1f:cc:d8:30:88:f4:77:f9:
83:66:0a:6b:79:aa:a9:05:1e:0f:8d:9c:a0:bf:63:41:c3:80:
c9:87:e8:e6:46:50:0f:c1:98:0a:70:0c:8b:52:27:5d:90:b7:
b8:d2:ab:9a:ac:47:76:65:e3:33:43:1c:21:bb:31:2f:5e:09:
ac:90:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:16 2025 by rpki-client