Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: /y1eUqS8SvRKLBYZyN2sXvVWqwsDVjPhwe4qU4AegXM=
Subject key identifier: 5B:72:EF:3A:02:C7:CA:44:FE:A3:DE:26:2C:B4:8A:BC:60:BE:00:C1
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 0198730697FCC17EC8B71A27B6047497E397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 08CC
Signing time: Mon 04 Aug 2025 03:01:08 +0000
Manifest this update: Mon 04 Aug 2025 03:01:08 +0000
Manifest next update: Tue 05 Aug 2025 03:01:08 +0000
Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: UAQTNsbCFBNTScdJMvMpLTW7XX/LqNUA6Gpwq8c71Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:97:fc:c1:7e:c8:b7:1a:27:b6:04:74:97:e3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Aug 4 03:01:08 2025 GMT
Not After : Aug 5 03:01:08 2025 GMT
Subject: CN=5b72ef3a02c7ca44fea3de262cb48abc60be00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:90:d2:73:35:6f:57:fb:f9:d9:6e:42:4e:
8d:2e:43:f1:c8:69:97:67:b2:9e:e5:38:5b:bf:6c:
9a:75:cb:cc:d1:4b:d3:b2:fc:e1:b1:03:e7:ca:ee:
13:d9:46:9f:c6:90:96:24:b5:df:65:2f:6e:b5:15:
a2:6c:21:c0:73:de:16:b1:a4:76:95:66:b3:41:5b:
8f:e9:49:7f:d2:c8:ba:48:66:d7:fe:5f:37:0a:3d:
26:71:41:72:a5:0c:25:a3:a1:bf:4f:7e:3f:84:ad:
15:7d:19:da:8d:a4:93:3f:07:af:5e:1b:c3:f3:8f:
38:3f:5a:15:59:60:09:44:3d:b5:41:fb:21:9e:72:
5e:86:8d:b5:12:0e:3e:10:b9:58:49:77:69:be:59:
c7:77:42:ec:7e:f3:19:c6:bd:e9:4b:7b:ce:6e:d8:
0c:c1:bc:61:58:c0:30:7c:69:0e:17:2b:5b:9b:8e:
c4:1c:0d:e2:9a:32:ea:b3:07:dc:56:a5:40:db:50:
07:ad:2a:15:2c:f8:b3:ca:09:38:7e:7c:0f:17:c7:
76:a0:db:6a:af:a6:4b:0c:7e:54:7f:83:ff:bb:94:
b2:9b:12:89:42:fc:77:9a:89:a1:40:e1:b7:0e:41:
45:61:2a:ca:7c:e4:d4:4f:18:2e:b8:3c:5e:b0:fb:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:72:EF:3A:02:C7:CA:44:FE:A3:DE:26:2C:B4:8A:BC:60:BE:00:C1
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c9:eb:5c:5e:76:63:15:92:c5:ec:70:74:7a:71:50:6e:06:
3b:03:ad:11:c9:78:a9:9c:5f:8f:ea:f8:33:33:f9:96:2c:ff:
00:c9:54:04:2f:d8:ea:6d:9b:74:dd:74:9e:3a:74:2e:af:82:
e3:72:f5:63:33:2f:79:9d:db:cf:cf:b3:44:ab:d4:dc:87:48:
45:45:97:18:34:d4:48:cd:f5:f4:26:02:91:ea:9a:6e:67:36:
de:3d:bd:ba:60:46:46:cf:88:f0:c0:6b:a1:59:89:b5:6e:7b:
7a:3c:33:73:b9:de:12:63:5e:79:35:30:78:8f:0a:48:fa:44:
2c:df:32:c3:68:25:ef:12:c0:61:01:4e:60:b1:74:d3:33:cb:
e4:b3:25:b5:a0:c1:e1:01:f0:a0:cf:63:f5:03:5b:29:77:3d:
78:53:92:82:82:59:33:24:ed:90:20:8b:0c:0c:60:00:25:e3:
e2:3e:d9:e8:97:67:89:f1:85:38:98:fa:46:27:76:07:17:75:
95:8f:4f:0f:d0:f1:64:a9:ea:07:bb:76:b8:86:04:25:d5:0d:
5f:60:3b:59:af:c4:f7:2e:8f:40:58:0a:01:a2:41:2c:7f:6a:
d1:cd:ca:e1:6d:ae:9f:72:ec:b5:c5:12:9f:1b:47:49:a2:a6:
78:dd:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:46 2025 by rpki-client