Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: 8DevkB7Vzm3ZDhW8YN5ARsrWhIjwOPcMQapn6Dldg8Q=
Subject key identifier: 69:88:99:A1:BB:B3:3A:F4:F5:50:28:50:68:3D:41:21:7D:7B:8D:BD
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 0198D4A832133088B4F84D40197124A31876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: lgkdSdY7hWgePFzOsn8MT46LasdQXWUzEV90oLn2Fr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:32:13:30:88:b4:f8:4d:40:19:71:24:a3:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=698899a1bbb33af4f5502850683d41217d7b8dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:e3:49:0e:56:a0:1e:27:5b:8b:db:99:1b:
2a:92:0c:cc:de:4c:b4:73:88:7c:63:a4:91:0f:4b:
ad:0b:71:f9:d2:08:2c:8f:be:e7:e4:0c:11:0f:66:
d1:69:e6:9b:84:26:85:f3:85:f3:81:a4:31:f3:b5:
2c:f9:a3:9c:fc:5c:b7:b2:b8:59:c8:43:5e:58:52:
9c:e4:c2:58:b7:21:54:cd:2c:ad:b0:8a:15:b4:6d:
cc:3d:ca:09:06:31:b5:b1:62:55:63:20:12:ab:10:
5b:8b:33:44:c5:4e:af:49:46:02:ff:a2:76:91:a2:
27:4e:fb:cd:53:4f:d5:aa:cb:0d:dd:42:c6:b0:b1:
aa:17:7e:9b:87:50:5c:65:de:cd:ee:43:2f:99:14:
c7:f0:f3:ae:58:40:f1:d8:4e:fd:18:c2:2c:7f:6a:
e2:a5:30:d4:ab:e9:68:9d:c9:4b:4c:44:1d:97:22:
b8:21:0b:d1:a9:ae:21:45:1d:e1:2c:dd:c4:2d:08:
6f:39:8f:52:04:f0:40:32:c2:99:59:9f:b3:d0:5d:
82:88:e5:69:c6:36:14:69:03:60:07:33:c3:ae:dc:
d0:43:d7:c2:b6:31:b5:c9:d0:e0:2d:fe:6f:a9:ac:
5e:85:f6:8b:28:53:8b:8b:13:b0:86:36:78:40:d8:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:99:A1:BB:B3:3A:F4:F5:50:28:50:68:3D:41:21:7D:7B:8D:BD
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:47:74:c0:92:56:ad:93:76:c0:8d:0e:b7:dd:76:3e:34:29:
80:e0:9d:e5:10:f7:e0:d9:2c:95:73:19:35:8d:a0:f7:11:73:
e6:38:0a:d1:86:77:fd:87:7b:a5:55:7a:00:24:f4:68:07:47:
be:dd:41:b6:86:ac:f5:36:76:a0:e4:9c:64:8b:33:40:14:b0:
3a:41:ff:69:06:1d:89:1f:02:3e:1f:87:cb:bb:f2:bc:26:08:
de:f3:2b:3e:60:54:d3:71:91:b6:2b:c1:d9:8f:f7:47:7d:80:
ec:99:79:5c:d7:d6:ad:5d:c8:71:8b:57:6b:b2:18:7d:6d:d2:
54:86:f2:ec:40:23:cc:b9:f7:e0:36:1a:d7:2d:33:20:f6:2f:
3d:31:43:63:b4:fb:f0:3c:07:fe:5f:68:53:3b:0e:2c:82:7b:
2d:3a:ba:12:0d:25:e3:46:34:88:9c:21:0e:a5:ed:11:42:c5:
df:bd:c5:7a:92:d6:d2:2e:ff:d2:cf:c6:d5:8a:0f:75:19:b3:
c6:d1:97:04:0f:29:e7:c1:60:91:31:59:b8:97:ce:1f:95:da:
ae:d5:84:2c:ab:e7:65:9a:70:be:3f:23:1a:cc:41:e5:86:12:
4e:df:b0:d9:24:21:a9:51:39:87:f6:de:7c:4a:7b:dc:2c:80:
d6:3f:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:15 2025 by rpki-client