Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: tbjEcH7vXnryoIWmA8ybaDdswjIrlHdvqDu/Qk/LVEk=
Subject key identifier: 52:C8:40:40:8B:F3:1D:A3:A4:12:6D:CE:01:1D:C1:D5:12:46:5C:C3
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0198D5F1A7870FF00AA48F86BD6AA78FBB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 152C
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: RQy06CKjeATisJtu79dfDCZUNxpp8WLCJvGxZ2xi5o4=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a7:87:0f:f0:0a:a4:8f:86:bd:6a:a7:8f:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=52c840408bf31da3a4126dce011dc1d512465cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:b7:26:6b:9e:14:e5:85:30:a8:c1:8b:30:
61:6c:a7:7a:47:f9:d3:f8:f0:28:35:7e:68:94:b2:
81:ad:9d:ff:d3:b1:ed:f2:4a:f7:76:9a:78:8c:85:
15:31:34:59:c6:76:55:0f:47:34:5d:41:f4:fd:36:
77:b2:bc:80:68:f5:9b:8f:10:94:69:32:e5:2e:4d:
0b:d1:28:a8:33:a7:c3:c2:7c:19:e3:1d:7f:21:b7:
57:d6:2a:d9:d6:01:11:00:5f:d5:2b:73:68:a3:14:
5f:63:cb:f9:42:02:4a:04:f3:80:ab:33:a5:ca:69:
bd:53:5d:f7:38:3b:98:96:cb:4d:e0:cf:1f:82:e6:
79:0f:67:1b:a6:c3:33:11:ed:21:a2:7e:21:58:6f:
be:89:45:c0:a4:07:19:93:3e:59:44:27:45:4c:f4:
a5:7e:21:f3:41:f0:92:bd:2f:02:8c:c0:0a:ef:09:
d4:1c:db:32:0d:d5:f6:77:6f:dd:51:d7:6d:9d:dd:
26:0e:f9:ee:24:4a:21:4c:83:38:e4:63:5f:d8:91:
b1:a4:c6:b0:4e:eb:7b:06:99:0c:3a:60:1b:32:2b:
ad:b1:64:d2:32:f9:61:01:cb:53:fc:07:d7:b0:d4:
a9:30:32:ab:09:e1:84:56:13:d2:98:00:57:e7:c9:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:40:40:8B:F3:1D:A3:A4:12:6D:CE:01:1D:C1:D5:12:46:5C:C3
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:77:8b:f3:7c:91:b6:fc:36:33:ba:7d:bd:fd:23:55:3f:94:
45:bf:34:49:36:1e:3f:bc:b6:09:54:04:21:09:a1:c7:7b:ef:
c1:a8:d7:93:c3:dc:e0:c6:54:3d:cc:96:eb:43:f2:29:dc:b2:
3f:30:12:72:fa:2e:e7:29:27:b9:bd:81:a4:74:a7:06:a6:f9:
49:22:d5:da:19:bc:b1:91:97:65:e8:49:bc:5e:6b:75:81:e2:
01:c7:72:0b:8c:c4:2e:48:e1:9d:04:3e:8d:f7:d4:c3:9c:1e:
b7:3e:4a:ee:88:23:a6:81:8e:42:5d:40:f5:c0:43:29:53:26:
77:db:88:a2:1e:f2:d5:33:01:bd:bd:d0:e4:17:9d:93:c7:9c:
d8:3e:ca:92:08:9a:05:95:0c:d7:e3:22:95:c6:59:ac:f0:98:
bc:a7:77:6e:e0:cd:40:8a:ae:9a:7d:a0:3f:e0:e9:69:e2:68:
b5:c8:9c:03:45:2c:71:8e:ab:2b:07:83:71:96:34:65:df:40:
af:50:8a:9a:b9:92:98:93:6c:8b:52:27:0a:b3:50:bd:e0:c5:
1d:5b:b9:98:9c:1a:d0:2f:51:54:6b:92:db:ce:46:35:4f:70:
16:da:8e:37:2e:57:96:7f:d4:9e:63:b1:23:a5:59:7e:b3:5c:
70:15:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:43 2025 by rpki-client