Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier: rznH7JFKhtlX4R6A3jNdm+ifIRhpRqFc5jpXDVVfuMw=
Subject key identifier: 66:4A:46:9B:55:51:8D:98:FB:52:C6:A3:C1:1D:25:44:C8:FA:69:DE
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 01987486ABD1E2CFE783F5B1C8432C61EDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number: 01E2
Signing time: Mon 04 Aug 2025 10:00:39 +0000
Manifest this update: Mon 04 Aug 2025 10:00:39 +0000
Manifest next update: Tue 05 Aug 2025 10:00:39 +0000
Files and hashes: 1: 7Neyj-EgqtHn8yPIzyvgflhPyEk.roa (hash: RiX60C1lYHQe9i54rwed/ld2R6Zxx+sj83TfysW1UZM=)
2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: HZbh9gU3hMspexzVkez6p58vmXVE+DU1H8wUsRyprQ8=)
3: LtRuJcDQFgXrBJSxyY1nA0HvnuU.roa (hash: Fm9L8uM5OQuU38BmCU77e5/o3WHCT2yCoE5kiEsmZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:ab:d1:e2:cf:e7:83:f5:b1:c8:43:2c:61:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Aug 4 10:00:39 2025 GMT
Not After : Aug 5 10:00:39 2025 GMT
Subject: CN=664a469b55518d98fb52c6a3c11d2544c8fa69de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:9b:94:2d:fd:6c:7a:a5:7c:d4:50:86:35:
24:4f:34:b4:6b:5e:90:50:03:4c:2f:97:38:bc:ce:
59:a4:f6:41:da:36:59:be:a8:0b:9b:74:0d:1c:63:
bf:95:58:ca:cd:72:dd:99:56:50:c7:4e:62:00:10:
9e:e3:40:48:c9:3e:c1:04:56:3d:b3:4a:a1:14:3a:
34:23:19:e1:c1:c7:67:27:7d:e1:7b:a8:5e:1c:bb:
9b:09:e8:15:d7:b2:1d:b7:e2:ef:27:c4:ee:c3:88:
cf:58:4a:f4:44:99:c9:69:00:64:48:05:17:0b:e2:
f3:66:0d:18:93:15:c8:22:57:02:7c:9b:25:2f:4e:
aa:e1:d4:6c:40:72:f9:b3:69:32:5c:bf:d2:a6:d0:
96:fd:8f:19:ab:37:9b:3a:fe:9f:1a:a2:ff:23:a5:
6a:82:36:4c:8e:e3:d4:6f:7a:38:00:c3:ef:7f:63:
9c:b3:15:bb:2c:c6:75:c6:99:35:ca:ce:3c:fb:e5:
72:58:b2:55:5d:f4:9a:50:fe:43:da:3f:b2:e9:bc:
ca:cc:85:b6:9b:d7:04:9a:04:85:49:4a:a6:c3:56:
6f:30:97:85:70:28:3a:d6:75:56:45:69:bd:44:d0:
01:1e:60:6e:13:20:6b:ec:7e:9e:23:b9:9d:51:b9:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:46:9B:55:51:8D:98:FB:52:C6:A3:C1:1D:25:44:C8:FA:69:DE
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:db:67:b9:77:66:67:bd:78:b9:5c:4b:07:15:1e:11:8c:
51:d2:ca:f1:d3:10:b8:ca:df:36:76:43:22:7b:94:d1:1d:21:
83:2a:cd:d5:14:67:5f:8b:4c:aa:94:e8:5c:66:14:70:25:9f:
61:ca:1f:d7:55:61:4e:fe:70:68:2d:29:c0:c6:df:55:da:73:
9b:90:d3:26:f6:26:44:78:b5:47:8d:5a:32:4b:df:31:9e:ed:
da:86:ae:3f:96:ea:ef:8c:1a:e1:38:54:b8:a4:57:86:e0:57:
f0:bd:04:49:29:26:b8:78:16:28:69:ed:fe:a7:8c:c6:ca:81:
2f:9d:25:e5:44:64:20:19:e7:6b:82:2e:85:a5:01:7a:d5:c4:
7e:5a:e2:6a:79:1b:f3:e1:66:25:e0:99:d2:2d:9f:c8:cb:5d:
4e:7c:e0:73:f5:61:8b:95:f5:17:38:39:4a:30:4f:2e:a6:8b:
0a:4d:8b:14:9d:22:ae:27:aa:85:45:47:92:45:08:3d:0f:ed:
42:68:42:10:ca:56:b8:7a:66:e3:ea:b9:ff:e6:98:75:0c:96:
3e:1b:70:7a:5a:42:75:2b:2d:35:c8:bf:ee:42:01:75:6b:28:
46:73:e8:b2:95:37:b9:df:9c:45:99:b4:9c:8d:d6:26:11:cb:
ba:f7:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:06 2025 by rpki-client