Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: JB3yHOBwh5avT3dLtdiStogbygPtWDKnGzItOti70+g=
Subject key identifier: 03:79:24:41:B6:50:32:BB:A5:A3:DA:31:63:77:F7:03:FE:B8:73:E8
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 01987F78EC28CCCF7E7355CABCE938DDC06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0C01
Signing time: Wed 06 Aug 2025 13:01:27 +0000
Manifest this update: Wed 06 Aug 2025 13:01:27 +0000
Manifest next update: Thu 07 Aug 2025 13:01:27 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: D8rb81wu9/IxcKo7zIDyi9Vqw/rRjGh6HtpJfyhfRBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:ec:28:cc:cf:7e:73:55:ca:bc:e9:38:dd:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Aug 6 13:01:27 2025 GMT
Not After : Aug 7 13:01:27 2025 GMT
Subject: CN=03792441b65032bba5a3da316377f703feb873e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:2b:f8:ad:fb:3f:84:31:3e:be:71:69:be:
7e:82:43:f3:6a:8a:c9:61:e7:f6:09:69:ed:b7:69:
04:94:0d:ce:83:07:8d:c3:ce:ba:b3:6e:ea:26:dd:
b7:ee:b4:7d:96:e2:35:c7:f6:bb:a0:cd:ec:d8:44:
2b:2e:ac:73:c5:21:aa:5a:07:03:79:12:5b:3b:fc:
b0:5c:60:c1:22:52:cd:7a:78:2e:51:6d:2b:69:d2:
51:06:1f:42:bb:e4:b8:1e:19:ac:6d:f8:27:e2:30:
71:fe:26:fd:25:a4:25:7d:eb:65:dc:ef:92:36:c4:
b6:fd:1f:a9:4f:d2:36:74:a9:2e:d4:8f:80:57:6b:
9f:92:da:a6:c4:ea:a9:48:23:96:2e:86:b6:01:3f:
08:53:66:0d:2a:2b:f9:dc:3f:3f:87:98:3e:c2:ac:
20:93:fe:61:bf:67:c6:f9:f6:9e:ed:32:22:fc:8d:
05:2a:47:a6:ea:55:ab:77:fc:3d:5b:44:22:09:7f:
ff:68:fb:55:cc:65:4d:c2:86:0d:b0:4f:a8:8b:cb:
ae:cc:d4:59:7d:15:fd:fb:a2:b8:67:38:c9:11:3e:
71:67:a9:b1:c7:a6:62:bc:12:cb:f4:a8:3c:84:d8:
b4:fa:f2:21:d8:24:5c:50:59:be:28:af:47:47:11:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:24:41:B6:50:32:BB:A5:A3:DA:31:63:77:F7:03:FE:B8:73:E8
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:07:ca:c8:6c:b3:c3:b1:b9:e8:39:c1:0b:b9:98:12:a1:5b:
29:2e:a3:4a:00:89:bc:fe:1d:a9:ea:3b:e0:9c:8f:50:d2:ec:
a4:f3:df:88:d1:4a:e0:33:c4:97:ad:c6:93:bd:56:58:76:8d:
44:81:77:5c:f2:3a:58:63:35:06:2d:ea:25:80:1d:40:a5:4d:
fa:01:ad:c4:a1:2f:59:2c:69:65:6b:c2:2a:cb:07:f3:9f:44:
40:16:9f:18:c4:9d:38:2b:db:08:30:8c:1d:87:a0:dc:2b:e4:
8b:84:cd:99:40:b3:52:60:99:95:aa:be:53:67:88:33:a1:c7:
52:a6:7e:35:88:7c:35:9e:bf:d7:16:6d:08:e9:2a:9a:62:ef:
98:71:0e:3c:47:36:f9:c6:ed:a8:7f:d8:02:20:70:67:ba:16:
b0:28:b3:dc:ce:bd:d6:bf:8e:88:1a:ad:45:95:2c:95:85:db:
0b:08:fa:8c:5d:da:23:c3:90:7e:6c:29:51:b7:82:05:97:2f:
6a:8b:87:72:10:33:52:ca:b5:af:66:38:57:7a:bc:b2:37:d3:
00:f1:7d:20:35:d7:8b:cd:6b:62:e1:d7:a7:c6:8b:89:2f:d6:
1c:02:9c:00:9c:bb:29:81:e5:62:40:52:a5:3a:dc:9b:7c:e6:
1c:99:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:23:26 2025 by rpki-client