Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: XvIoVM58Csm2cf/UlZANxtydNatCE/yakRdkr6oQt7g=
Subject key identifier: 43:7C:8E:40:EC:44:0C:33:82:F3:ED:43:2B:CB:BF:02:59:A0:07:72
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 0198D5F1B0006DF3FD64099D5478604635C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0D40
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: zAsZl0xacCC7v7lowxufOhPE7SRyGKh4TTMNT5hVFQE=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b0:00:6d:f3:fd:64:09:9d:54:78:60:46:35:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=437c8e40ec440c3382f3ed432bcbbf0259a00772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:36:82:30:cf:1d:9e:e1:ff:f5:a5:d2:1f:
f3:44:95:cc:f0:f9:83:59:c9:34:be:54:12:87:1c:
6e:77:2f:78:d7:59:7e:06:44:1c:9e:e9:1f:f0:8b:
87:c8:70:c3:30:08:65:a0:ab:7c:f3:d1:61:c4:39:
6a:03:41:00:69:4d:70:e7:bc:8d:06:39:a1:44:bb:
bb:35:ac:97:33:48:9d:29:f6:17:b8:3a:19:6b:12:
5c:1a:9e:72:bc:59:17:26:b8:cb:99:ff:c8:23:7c:
8c:2a:54:44:8f:3f:23:52:c3:29:fd:18:b5:8f:d6:
c2:8f:a3:2f:21:4f:47:e3:ed:5f:ab:b8:df:02:95:
2c:31:c7:c5:73:b0:cc:5b:16:23:a0:65:8c:d4:b8:
90:ef:93:de:d8:e6:6b:4b:7d:6c:33:39:ee:4a:a1:
a1:76:44:6e:97:a5:84:39:13:cb:22:f8:92:81:f7:
bb:b0:d3:82:76:5a:cc:e1:0e:a7:72:c2:26:a7:88:
16:0f:93:38:7b:34:4b:cb:0f:d9:43:30:4b:00:a1:
54:7b:55:49:59:0f:12:4c:79:3d:39:2b:63:39:c7:
fe:d1:e6:80:a8:5f:b2:70:de:31:e7:f1:3f:a7:25:
3d:02:82:26:df:93:6a:85:f4:ca:44:f7:f4:ec:53:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:8E:40:EC:44:0C:33:82:F3:ED:43:2B:CB:BF:02:59:A0:07:72
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8a:d7:68:29:9d:4e:2d:ba:f0:4e:23:41:1c:67:38:77:2f:
2c:a6:7b:d0:8b:af:02:58:0f:63:48:a0:c4:49:f1:7f:3a:12:
ec:8c:47:8d:a4:7a:61:11:49:a7:4d:94:2e:e9:89:59:22:cc:
84:1d:f5:92:6e:0a:6c:dc:de:75:c3:77:a8:79:4a:f1:31:04:
74:a9:f6:3f:fe:7c:c1:0e:16:6c:a2:41:c7:c5:0c:f9:cd:33:
fb:d1:4d:46:d1:21:78:bb:03:69:57:53:04:a5:77:3a:ec:34:
ab:3c:84:8d:e9:77:1e:ea:73:62:a6:8a:34:57:10:4a:6f:45:
95:5d:32:d8:24:7f:8e:3c:84:a2:80:e2:b8:fe:a8:51:b1:18:
39:38:0f:fe:90:0f:4b:ac:63:98:05:39:a1:7b:95:c2:fb:fd:
d0:f0:a8:d3:43:00:4c:2e:43:13:e5:20:09:32:76:e0:bc:e8:
41:5f:e7:98:4e:a4:e8:fc:f0:11:80:d4:5b:dc:b2:a8:54:c9:
79:51:4e:5f:6f:88:65:8f:fb:b7:44:96:63:04:44:f2:9b:45:
06:dc:6b:aa:e6:9a:a0:9b:a0:0b:42:ed:da:96:fb:74:2a:ca:
06:1a:4a:a2:67:77:d3:d0:2a:a5:48:3f:cb:bc:1b:15:8a:9d:
88:90:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:10 2025 by rpki-client