Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: eD5irzC5fiiJovdHT6n51e1wBmn5n4n+x2HWbrD2v+k=
Subject key identifier: 3F:D4:1A:8E:7D:A3:60:0E:DF:CB:F1:ED:CF:04:6C:70:CF:83:15:DA
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019894B72F0E94BF31305B1312C401F9C486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1526
Signing time: Sun 10 Aug 2025 16:01:29 +0000
Manifest this update: Sun 10 Aug 2025 16:01:29 +0000
Manifest next update: Mon 11 Aug 2025 16:01:29 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: KLsqMtBsITiwkk5hg/eKUeHr5MzlD7jLcxr/684Sn04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:2f:0e:94:bf:31:30:5b:13:12:c4:01:f9:c4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Aug 10 16:01:29 2025 GMT
Not After : Aug 11 16:01:29 2025 GMT
Subject: CN=3fd41a8e7da3600edfcbf1edcf046c70cf8315da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:04:8c:e7:06:96:cb:6b:fb:fc:42:27:3f:
26:14:aa:8b:03:96:e4:ba:e2:7d:42:65:df:e0:d4:
1f:df:f1:45:43:d8:7c:82:4b:8e:ad:c5:35:34:42:
a2:e8:75:9b:4c:61:ad:ee:a9:55:ca:6d:33:a6:50:
0c:1d:19:fb:ad:65:b2:e7:3c:47:4a:51:17:fe:58:
fd:e1:8a:63:af:41:7c:46:a3:27:17:ec:13:99:99:
f5:f8:cd:47:f6:05:db:4b:16:49:b8:b4:2c:c5:c7:
51:ab:c5:c9:70:dc:92:04:c0:48:a0:16:29:1e:df:
50:a6:11:30:52:9a:bd:6b:db:83:f1:15:90:63:75:
8f:43:b5:7d:2b:fd:f9:37:57:e8:8f:0d:ac:11:b3:
ca:c7:2c:19:bf:4b:a2:a4:43:9a:c6:41:dd:01:bb:
9d:9e:aa:b3:d9:05:b5:71:95:06:23:ec:ef:21:01:
4c:5b:1e:96:46:46:1e:71:1e:a5:d9:4b:7f:c5:a7:
cb:2d:23:38:53:81:24:9e:3d:80:27:dc:b9:29:b0:
83:e4:90:bd:87:e8:6b:ed:a6:f9:2a:0d:f2:4d:8b:
9b:29:a4:d0:b1:a1:86:7f:fb:0e:6b:14:05:3a:1f:
b8:fa:81:cf:9c:32:8b:55:43:86:2b:86:59:2f:c2:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:1A:8E:7D:A3:60:0E:DF:CB:F1:ED:CF:04:6C:70:CF:83:15:DA
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8a:45:e0:e9:eb:ae:6b:85:34:db:74:84:69:24:11:44:ca:
8b:49:f8:3e:d5:83:cf:dc:4c:8f:65:29:94:5f:f3:d4:4c:7d:
46:a4:b3:e4:ef:cb:6b:37:92:f6:49:51:ca:77:0f:c5:d6:af:
ea:53:7b:fa:4d:62:3d:d1:aa:8d:71:e4:d8:73:93:cf:c3:64:
86:6e:31:3b:56:5e:64:5b:a8:73:be:0e:a5:f2:b6:87:67:12:
55:d6:aa:04:8e:bd:86:39:96:83:fc:de:ac:f0:7d:3b:73:f0:
f7:06:b2:bd:86:5d:d5:81:41:5f:bf:d0:45:f5:d2:0e:73:d8:
b7:89:5d:55:dc:61:10:77:94:4c:74:c8:b1:14:8f:96:aa:bb:
c6:9b:d0:60:88:76:03:2a:72:7e:ef:d5:31:69:d7:21:3e:18:
3c:62:08:3e:03:53:9d:fc:7b:e8:44:71:af:3b:79:42:af:95:
57:69:bb:39:fd:cf:37:b6:1b:6e:65:6c:83:b8:a3:f9:47:64:
d3:8b:fd:77:33:44:95:f5:61:a8:7e:e3:16:dd:12:f7:09:75:
6a:d7:f0:90:1a:20:8b:e0:8e:e7:0d:bc:a2:38:07:bc:94:ab:
74:a8:be:d7:24:21:6a:99:76:c5:4c:d3:5c:22:51:53:b9:65:
97:22:a0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:14 2025 by rpki-client