Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: 8Qwd61Aw20ayZP4fGiOBX87Da7pAl+NsmcaeYRRScgg=
Subject key identifier: 8E:DA:CF:73:1C:46:40:B3:03:2C:6E:EB:C0:A1:EF:A1:E0:7F:C4:0D
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 0198D7059D27C715D6F24B7BC82F9D18947B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 01A2
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: 2qidwRk2AiDcnibeM6oaaNat4+Gx/UUA61H9msyKMY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9d:27:c7:15:d6:f2:4b:7b:c8:2f:9d:18:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=8edacf731c4640b3032c6eebc0a1efa1e07fc40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:06:ea:de:67:5e:39:c6:8a:ff:c3:4b:e1:
97:bb:dd:c2:e1:56:e9:51:54:f1:19:06:d4:5b:df:
13:7e:cc:5f:35:d7:2c:83:68:d9:34:ab:47:58:22:
9c:5a:4c:70:75:dd:4a:20:f5:7d:fa:ea:46:cb:a6:
fd:12:f1:60:37:0f:69:88:65:19:15:b7:ce:56:e9:
67:39:6c:92:29:de:fd:6f:bd:db:19:cc:8f:56:58:
a0:5f:3c:d1:1b:8f:11:1d:cf:ac:13:47:ac:5c:94:
f2:e2:40:6f:2e:c5:4e:e3:3a:8a:1c:e3:1e:58:d1:
47:bb:0f:75:26:84:ad:1c:2e:d0:92:c2:9c:79:f3:
33:42:09:5d:e0:e2:cb:77:77:6a:3b:4a:f4:d2:5e:
81:6b:97:1b:ba:e4:87:80:bb:13:3c:8d:68:4c:11:
52:9c:2f:c3:0a:28:5f:7e:19:e8:cb:1b:f9:f1:0d:
20:de:07:74:f4:43:be:50:30:0f:05:83:84:4a:26:
98:f7:b3:4a:44:68:ee:72:5a:c1:33:0f:a6:74:d6:
0c:2f:68:c9:4b:16:a1:85:6f:4d:ce:99:8a:54:f0:
3f:f3:77:a0:67:65:4d:de:98:9e:d5:5a:89:b4:8b:
85:2e:7c:6e:4f:9a:f1:52:92:f0:11:39:e4:1e:70:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:CF:73:1C:46:40:B3:03:2C:6E:EB:C0:A1:EF:A1:E0:7F:C4:0D
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5a:ad:f2:8d:88:5e:3b:50:da:0b:e4:91:5b:c0:d6:b8:53:
57:8c:56:3e:e0:9b:2d:09:53:db:9c:74:ca:8d:0b:f4:11:58:
90:7c:3e:89:b5:f8:bd:c5:56:2e:50:2d:a9:fb:8c:31:dd:89:
34:6f:e6:6e:b7:72:05:3c:c0:00:a4:7e:ad:23:bf:0f:20:c1:
45:72:9f:d9:5a:ec:31:c1:bc:81:b5:13:8a:28:35:23:01:77:
d2:23:d2:ec:6c:90:f4:f2:3f:e1:3a:50:1b:3c:6f:f9:25:c6:
2f:85:43:09:41:86:02:30:00:52:36:05:d8:1b:d8:08:08:51:
50:13:76:ae:15:92:66:5e:d2:50:d0:d6:7d:f8:d7:82:04:1a:
c2:e7:22:fe:4f:80:89:49:f1:88:8e:a6:0d:12:c4:2c:0b:4f:
d1:88:4e:a7:b3:f4:c7:a8:d7:d9:b0:44:5f:ab:a4:25:50:53:
79:dd:25:4a:a1:70:1c:cf:ac:7d:d0:37:90:91:e9:ce:0f:67:
08:c8:9f:bc:af:99:d6:f8:fe:95:bc:a3:c5:fb:52:87:b1:cf:
4c:02:69:98:65:e1:0c:3e:c6:17:7b:59:bf:a7:ec:2b:99:f7:
2f:ed:c3:65:c5:dd:20:50:04:1b:e6:a3:db:92:3b:74:7e:24:
6f:9a:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:34 2025 by rpki-client