Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: wF94hM7BCRO8HzBbaEyHLJMCirES5C0Fz6LJc8xtqYk=
Subject key identifier: 82:14:9B:05:81:2E:8D:D8:4C:38:9E:FC:9F:10:A4:4D:E2:40:FD:16
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01988A69BDF113F87DC019FD017AE6CFAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1249
Signing time: Fri 08 Aug 2025 16:00:42 +0000
Manifest this update: Fri 08 Aug 2025 16:00:42 +0000
Manifest next update: Sat 09 Aug 2025 16:00:42 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: vu+d9uHO9Vjp8ASFvQdXgvHOyI0sNz+pywdjo2xDwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:bd:f1:13:f8:7d:c0:19:fd:01:7a:e6:cf:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Aug 8 16:00:42 2025 GMT
Not After : Aug 9 16:00:42 2025 GMT
Subject: CN=82149b05812e8dd84c389efc9f10a44de240fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:a0:2e:43:c4:ad:cb:df:b5:60:6f:a0:36:
f8:59:9b:26:e9:97:58:82:a1:eb:ae:5c:b0:65:41:
13:da:85:20:fe:61:0a:ca:0c:8c:19:0d:0e:04:ff:
f2:27:a0:e5:ac:a1:71:f6:8f:ba:8a:51:17:bc:fd:
30:69:5a:9e:39:ee:84:0e:12:2c:97:51:16:57:c7:
1c:11:6d:94:0c:b8:9c:2a:b6:a1:e4:5a:4b:33:b1:
af:92:f5:26:6d:b2:32:73:49:5c:42:b0:c7:c1:c9:
62:f2:a9:98:e4:4a:a8:00:24:3a:c5:00:2e:1e:ba:
f4:84:58:71:69:da:3b:35:12:1b:46:08:58:ff:70:
52:a8:93:b0:2c:2c:6e:bc:a1:dd:03:7c:b3:14:59:
c6:b4:b3:60:24:ef:31:22:5c:45:79:c7:24:73:f9:
48:ca:0f:ce:ce:d6:8a:8b:c7:34:16:c2:f6:c2:1a:
68:cf:03:0c:06:f4:09:c3:b3:08:74:0d:89:84:50:
9b:cb:77:36:fc:08:3d:b6:fe:18:8d:fe:5f:5f:c1:
e1:45:c4:79:b9:03:d9:9c:62:d5:57:80:27:72:44:
d3:86:93:58:d9:7a:d4:ee:a2:34:00:a1:b5:a2:76:
82:56:38:2c:5e:ec:55:b9:f3:e0:44:6d:3f:87:e6:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:9B:05:81:2E:8D:D8:4C:38:9E:FC:9F:10:A4:4D:E2:40:FD:16
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:81:a4:53:44:e2:12:35:b7:3e:8a:26:8c:89:0b:f0:66:1a:
6a:38:57:4f:03:3a:5e:5f:42:a2:2f:b8:95:48:42:26:f4:ed:
9d:49:17:58:27:5d:35:d5:b3:6d:ca:ad:10:15:37:64:63:1b:
2c:30:d9:c9:50:a7:30:dd:2e:6f:72:7d:cd:d4:a0:69:36:bc:
f8:1c:97:07:b4:bf:3d:1d:a4:a3:0b:29:dd:77:28:be:07:0d:
9b:e9:bf:54:86:90:f8:50:9f:72:5c:4e:45:23:07:06:52:b1:
96:c4:ed:ac:d7:66:ae:14:51:06:a8:33:56:0f:08:7f:83:74:
cf:c7:47:8c:7b:d4:b8:34:5b:45:e2:b5:6a:ea:be:b3:40:11:
23:1d:32:19:05:39:39:91:dc:44:09:17:aa:01:ca:a7:d2:fb:
ad:3b:1d:c9:7f:10:69:8f:38:37:5b:0d:a6:2c:1e:0e:1a:26:
42:de:d5:6e:71:c2:8f:3f:09:16:1b:0a:d9:e4:eb:3c:7f:3b:
73:14:08:8c:3d:62:5d:62:f6:31:d2:c9:e5:06:8e:e1:af:15:
5c:57:c6:dc:49:56:85:54:3a:5e:f8:ef:07:02:cb:0c:5b:a0:
ec:79:29:2b:6c:81:00:07:ae:f4:1d:20:fd:19:ca:76:6d:25:
6b:43:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:13 2025 by rpki-client