Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
File: JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json)
Hash identifier: v985h+K7SJsUr16xWrAXEoMzgV5wanTAuIjRGD3CkKk=
Subject key identifier: D7:B2:94:49:24:FE:CA:4D:D5:FA:97:79:18:0E:A2:AA:3C:B7:C9:50
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 0198D5F1336ED64F9C0A50F0304EC4D3DAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
Manifest number: 0FC0
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: BW4BmUKCyDozy984WvALErmmyWk.roa (hash: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=)
2: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: DZLmnt+2evJIEjIakHglorUkd/uMWROm1Paeskbo7eg=)
3: kRjRCT1hQD1ho57w--1uU8Vfnmw.roa (hash: hC2/HbU7Mf5QSInHXiOZZl8RFNv/DCEQb2nhsuAiYAk=)
4: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=)
5: mDIQfv7lheWlkNzFn-WZkIXBSMc.roa (hash: v+ukO0uJ0pKEoYLwa+X3bJdigzbF9dbIADjWYWJJUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:33:6e:d6:4f:9c:0a:50:f0:30:4e:c4:d3:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=d7b2944924feca4dd5fa9779180ea2aa3cb7c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:d4:49:30:a0:36:a7:50:5d:fa:cb:a0:8c:
f7:7b:8d:40:07:d8:1c:c5:7c:5d:f2:04:66:24:7c:
0b:c2:a7:68:46:1d:20:be:43:49:f8:3f:9c:64:f0:
ad:ff:f3:38:c0:44:f9:b4:ce:31:6f:0a:0a:55:76:
8a:68:a7:49:33:a1:ba:e7:d6:02:f5:e2:69:70:2f:
b0:60:9d:ed:71:d8:5b:44:fa:26:24:cf:49:19:a2:
2a:61:86:93:1e:8c:99:33:e9:5f:49:f5:76:61:5c:
51:60:02:45:b8:77:5a:09:07:f3:d2:a6:2b:f7:6f:
52:df:63:2c:2a:92:4f:ae:d5:8f:8d:9a:64:d8:87:
c2:4d:e7:cf:71:69:d6:03:37:68:d5:e0:23:24:57:
38:e3:d8:98:7c:99:2b:ec:f3:f6:dc:34:f2:d5:1b:
99:35:27:d0:7c:09:92:02:9c:d8:15:13:9f:1f:3c:
1d:e6:6a:a0:6c:d9:f9:28:20:c0:69:3c:de:ae:cd:
94:64:8f:78:3f:1f:7d:ea:1e:c2:ad:ee:65:24:f6:
4b:ec:95:ab:05:e0:63:6e:ff:e1:35:89:f4:85:03:
35:75:6a:e3:43:e0:59:ed:0d:91:b4:de:bb:60:63:
6d:33:0a:1a:84:5f:b8:64:2a:8d:07:95:71:93:b1:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B2:94:49:24:FE:CA:4D:D5:FA:97:79:18:0E:A2:AA:3C:B7:C9:50
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8f:71:79:d1:84:03:ba:7e:73:38:c3:9e:3c:ea:04:a1:95:
20:25:ee:70:73:7b:8b:ba:3f:c4:8b:25:f6:40:95:78:ad:40:
55:18:ce:a0:5b:c2:3b:da:9d:7e:d6:27:8c:96:43:27:4c:24:
41:5d:81:37:47:70:00:48:bf:cd:84:b7:09:31:a8:d8:f4:94:
f5:f9:d1:14:09:51:da:3e:15:f0:1c:b5:c1:d1:a1:e3:ab:65:
bd:5d:6d:ae:2b:0f:dd:f0:4f:70:05:d1:6d:8d:1d:88:75:2e:
f9:30:0b:05:ec:09:37:36:b8:b7:01:f6:5a:7f:b5:5a:3f:4c:
14:59:e8:ba:98:e6:1f:56:37:36:25:49:42:00:72:df:61:36:
58:4e:92:fd:14:b6:be:02:fe:8c:f6:3e:72:f4:6a:9e:d6:68:
b9:14:81:37:9c:ae:d9:1d:0a:9d:1c:6f:51:27:19:ba:cb:f3:
c1:ca:23:84:4d:06:33:8d:6d:c5:2a:9b:33:6e:ba:2c:49:e6:
0f:ee:bb:e9:d0:3e:3a:76:15:bc:f0:72:af:cd:f5:da:99:07:
7b:b9:de:56:db:cf:e6:a1:de:cf:77:23:99:5d:5a:a1:ca:23:
ea:8d:06:c3:af:61:d2:92:06:88:0c:d2:fd:b1:c0:3a:57:94:
43:0d:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:40 2025 by rpki-client