Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: R4rcIMIlj1h/Aa6ArivVgv+Y83Xth1bJI+HCsSD94w0=
Subject key identifier: F8:A1:F3:B5:70:8F:C8:AF:36:65:D3:92:ED:47:E0:E2:BB:47:60:86
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 0198D65F6A08AF647976E703B22A2C686AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: BR21+UzuY02Ou5uxU1dwdlyAxEwdja++bEpr7mk1ciU=)
2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6a:08:af:64:79:76:e7:03:b2:2a:2c:68:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=f8a1f3b5708fc8af3665d392ed47e0e2bb476086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:5b:cc:4d:41:c2:1a:0a:84:8a:c8:87:f9:
6e:7b:75:8c:c1:46:73:09:34:49:dd:9b:09:bb:a3:
96:e3:0a:19:5d:da:be:f9:10:ee:d8:4d:61:0b:b1:
87:c7:69:f9:0a:77:06:fe:e9:e5:1f:5b:12:66:d1:
57:45:43:dd:cc:69:a4:92:62:1c:2d:4a:d8:76:cc:
1d:ad:b9:47:5e:7b:c0:f7:dc:12:ce:bd:a4:c0:c5:
7f:02:bd:15:fc:09:4d:2d:2a:8f:c6:ed:ca:c1:0d:
b9:b9:c4:66:c5:78:42:b2:b4:8c:b0:1d:f4:de:25:
46:90:7c:eb:06:79:7d:43:23:44:a8:91:60:7c:45:
88:a0:fe:c9:7c:6a:81:86:48:3e:fc:23:79:76:45:
b5:fe:c9:b3:6d:23:16:70:52:eb:50:ca:e2:bd:d8:
d4:f3:c6:de:71:c6:0e:91:0d:dc:a1:cb:f2:ff:46:
2c:60:6d:a2:6d:6c:d8:b5:78:7c:8a:c9:b6:70:cf:
1d:5b:3a:10:ff:41:66:27:db:06:36:6e:1f:0f:c1:
0b:f9:05:d1:09:ef:75:e1:5b:ba:65:6e:01:87:c5:
28:53:b8:5f:18:51:2f:9f:c8:54:af:df:11:b2:de:
31:6d:0d:7e:c0:b9:03:d2:aa:a2:5a:87:ce:bc:bc:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:F3:B5:70:8F:C8:AF:36:65:D3:92:ED:47:E0:E2:BB:47:60:86
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1c:a1:7a:d1:45:66:79:b4:9f:9a:b2:9c:8b:e8:97:fe:44:
d9:d9:6b:8b:52:5b:09:38:e0:64:ba:97:28:7f:90:b4:4a:1b:
97:d8:d8:98:1a:87:66:da:2b:ca:53:02:df:06:1e:a6:ce:bd:
01:4a:01:d3:d5:36:35:ee:a5:a5:04:85:e6:72:22:fa:46:78:
0e:9d:c2:19:88:37:63:c3:ea:7d:e3:1c:c5:a9:5c:c4:a6:90:
79:c6:5b:be:b9:78:18:78:cb:c9:ce:6d:39:ad:5f:04:65:5d:
b3:6a:2b:47:7b:d9:e5:af:49:cd:ce:e7:88:3c:e4:0a:fe:80:
95:b8:ff:e6:94:4f:d6:af:45:a6:56:28:38:ac:32:90:c7:ec:
21:88:60:a2:f1:f4:bd:fd:c7:6d:ee:8c:3d:46:b0:aa:07:0b:
db:3e:3f:4c:7a:ea:db:7f:db:42:49:ad:8f:52:80:72:d1:c1:
3c:b2:e3:09:1d:4d:63:af:94:00:42:96:a8:89:12:1d:8c:e1:
ff:e3:34:77:94:38:09:de:9c:e1:7b:48:6b:87:33:36:b9:65:
a3:0b:b9:04:be:be:b9:6f:b8:ae:51:6e:9c:6b:00:2d:1b:18:
e3:3c:51:33:66:92:25:ea:19:70:5e:50:dd:bd:a1:63:02:f1:
13:0a:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:48:00 2025 by rpki-client