Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: 6kUslt3BDEVSK5edVw/ULQpozJcno1xtQD5mZ6Ta6hU=
Subject key identifier: 40:C2:23:61:4A:50:05:D8:5D:02:03:FC:20:06:94:15:02:F8:B1:E8
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 0198D4049E2D664E475B7FB5A044288CCFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 122B
Signing time: Fri 22 Aug 2025 23:02:09 +0000
Manifest this update: Fri 22 Aug 2025 23:02:09 +0000
Manifest next update: Sat 23 Aug 2025 23:02:09 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: IQmGfOocvxl+TByv06oRpVHo5mEqRa0IRCQnMKeW3vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:9e:2d:66:4e:47:5b:7f:b5:a0:44:28:8c:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Aug 22 23:02:09 2025 GMT
Not After : Aug 23 23:02:09 2025 GMT
Subject: CN=40c223614a5005d85d0203fc2006941502f8b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:49:f1:c6:4c:40:95:5b:6b:0f:17:99:1d:
a9:57:88:d4:08:b0:d8:a9:66:54:bb:67:5f:92:13:
ca:f3:0e:8c:40:ae:8d:ee:7b:3c:f0:c4:85:09:ae:
76:7b:43:79:e2:a5:7b:85:cc:21:c5:82:26:8d:d7:
1c:54:78:12:15:ef:cd:50:aa:48:a6:b4:54:e1:49:
6d:c9:62:e0:83:89:03:6a:a0:e8:d6:dd:26:a0:f0:
b6:b0:fa:71:9e:d7:89:2b:28:cc:34:2c:1d:bc:94:
00:4d:c3:af:92:69:30:75:da:90:18:03:33:31:d5:
93:c8:8e:93:40:5b:62:1c:f9:68:d0:3d:f5:74:4d:
74:32:99:45:52:13:89:95:09:5d:ca:7e:53:68:18:
68:c1:43:1d:00:c1:fe:60:e6:41:af:85:ef:51:6f:
35:fd:e1:3b:0e:d6:17:02:39:20:2e:30:b2:97:89:
a3:66:f7:46:e1:84:40:11:4a:f3:d2:b6:58:3b:1c:
24:dd:c4:5c:4e:53:f5:e2:ba:17:42:e3:7d:9c:ee:
f0:ca:b1:0d:7d:26:a4:bc:9c:f2:91:d4:52:4d:69:
29:72:b5:17:f8:ab:10:1e:e1:d3:7e:2d:d5:3d:5e:
d7:43:2d:65:db:af:92:4a:b7:1f:fe:89:c3:fe:9e:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:23:61:4A:50:05:D8:5D:02:03:FC:20:06:94:15:02:F8:B1:E8
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:43:3b:d9:45:41:8c:5d:c3:5c:db:71:c8:06:a2:c2:26:
cc:cd:63:64:ca:3b:e8:3c:1f:bf:f0:5f:d8:9b:f6:3a:b5:b4:
3e:d5:2b:73:36:47:05:b5:98:a5:f1:f7:a3:af:0c:b1:ae:bc:
03:8a:c5:f2:1e:85:17:ca:43:68:0d:fa:ce:db:e6:31:9f:1a:
a7:44:a7:46:91:6d:84:99:d3:6f:24:a2:6c:06:1a:8a:df:4f:
dd:e9:3a:8c:23:b0:6e:65:89:b8:7c:09:24:66:74:a5:b3:23:
63:c2:b4:49:df:06:08:ea:24:54:bb:aa:ed:3a:ac:ab:82:d6:
27:af:17:a7:87:ba:a3:b7:c0:da:45:47:78:71:fa:0d:2a:ac:
a7:81:48:ed:6f:bd:ce:37:df:96:ee:48:df:8a:f0:39:82:12:
25:66:90:50:d4:0d:82:18:9e:24:50:c2:15:6d:71:11:a6:1d:
0a:01:5e:66:1f:9d:be:e3:51:3e:45:d2:42:37:a6:b3:6f:f9:
19:1e:56:07:29:03:f7:86:3c:70:65:fd:16:36:3f:2b:c0:50:
17:b8:6f:ba:54:12:63:d6:20:03:e0:c5:41:d0:cd:d1:fe:55:
03:19:d4:c9:18:da:c6:ca:53:c6:4b:ee:53:d9:5b:95:17:9e:
6a:a0:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:25 2025 by rpki-client