Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: g5++x8qQPPHfE3yVFqnpaD7ckIdkA1gVguKbGz8E5AA=
Subject key identifier: 9E:01:04:E7:B2:A4:8B:91:BB:E6:5D:FF:7A:76:2C:AB:29:A2:CD:1B
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 01989E5F1B6717A56656BE8256817747FBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 1189
Signing time: Tue 12 Aug 2025 13:01:29 +0000
Manifest this update: Tue 12 Aug 2025 13:01:29 +0000
Manifest next update: Wed 13 Aug 2025 13:01:29 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: NDiQZqyJEgvgvvlY7xvCm3Qm8F8sx03ljWKY4JZzlVs=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:1b:67:17:a5:66:56:be:82:56:81:77:47:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Aug 12 13:01:29 2025 GMT
Not After : Aug 13 13:01:29 2025 GMT
Subject: CN=9e0104e7b2a48b91bbe65dff7a762cab29a2cd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:c7:1c:7e:bb:df:80:35:5a:87:91:b1:c2:
ed:1b:84:29:c4:26:81:33:fc:bc:78:06:46:92:01:
2f:93:ab:b1:ac:85:3d:ce:b8:3f:9b:30:d4:3f:46:
51:e7:01:02:1c:a8:9a:7f:59:e4:70:a9:6f:0c:69:
8b:a0:69:f8:7c:38:a2:26:08:2a:e4:2c:af:a8:66:
53:6d:69:24:45:fa:d0:32:f1:85:d2:18:5c:bb:db:
4d:34:a8:d9:e8:ff:44:46:0c:56:81:04:74:33:e2:
74:44:03:58:9a:7a:c2:96:6a:89:10:0f:31:72:08:
58:21:88:f3:e7:ae:3d:0b:d0:de:0b:e5:34:42:ec:
f0:b0:1d:fd:66:ef:9d:78:b5:ad:3b:10:5c:c0:11:
fa:61:df:b5:df:3a:ce:00:44:5e:25:88:c1:cb:e7:
42:18:2c:a8:fe:ea:02:ad:be:e5:29:e9:62:af:dd:
f4:96:40:a7:9f:a6:03:0c:a1:25:bc:bf:a1:fb:8c:
ff:78:9a:57:85:93:5e:46:2b:57:11:08:da:9f:dd:
0e:d0:a7:73:60:61:31:49:31:ea:07:9b:04:4b:77:
5e:8a:2b:fc:42:df:4f:ca:da:b8:ce:4b:24:6e:bb:
d2:05:e3:85:3b:4d:13:8d:ff:87:56:a0:d3:b7:3e:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:04:E7:B2:A4:8B:91:BB:E6:5D:FF:7A:76:2C:AB:29:A2:CD:1B
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:28:57:e5:4e:ac:b5:f6:dd:f5:c0:01:d6:14:67:17:16:81:
f3:6d:7f:f7:73:b9:71:b3:d7:0d:23:12:0f:97:f3:8e:0b:00:
d4:95:f5:1a:56:b6:88:a7:72:7b:96:40:2f:32:6c:a5:a1:ec:
94:38:38:6a:c1:80:1d:3b:46:00:8a:11:4b:29:29:c5:5e:7e:
30:cd:45:59:30:b7:69:91:a4:4b:1a:14:93:1b:93:81:ff:c4:
6f:11:33:f8:e3:58:04:73:cd:b8:61:57:53:a0:20:a6:58:3b:
9d:e4:17:ac:be:56:45:e5:c2:9f:d1:5b:12:ec:6a:28:fe:f1:
b4:2b:bb:4d:33:24:37:cb:9e:e4:f6:a5:66:42:ed:e5:7f:88:
5b:97:1a:92:85:17:dc:02:e9:7d:74:c3:18:e5:7b:d4:f1:5f:
66:25:79:50:e8:26:f8:e8:e5:81:66:7f:76:d3:c1:6a:0b:7d:
09:d5:82:db:d9:87:d7:3c:8b:ed:bf:55:bd:cf:3c:79:53:a5:
8f:5c:b8:87:c4:2c:16:86:e8:76:b7:b9:9f:57:7a:0b:b6:d3:
fd:3f:4f:be:47:73:bd:4e:c8:51:2d:d5:1b:7f:5f:3c:2c:0f:
1e:f8:3b:e5:58:7a:63:c8:f3:5c:ac:8f:13:14:f6:67:9b:b5:
99:52:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:01 2025 by rpki-client