
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: NBoGbcxmqGf/K0oC7W9YsYp9EJEiSEcjxFpXgsbmpm8=
Subject key identifier: 94:6E:7F:DF:CC:9B:30:30:BB:21:E8:9A:AA:1F:08:C8:13:DD:65:76
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 0198733DDAA2E3FFD312F4AFC0A06BF6187A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 15EA
Signing time: Mon 04 Aug 2025 04:01:30 +0000
Manifest this update: Mon 04 Aug 2025 04:01:30 +0000
Manifest next update: Tue 05 Aug 2025 04:01:30 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: 4A/1oPnkJsaeDDdpRKPiiVS1cQhlp+Xv0PGQSrKVKBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:da:a2:e3:ff:d3:12:f4:af:c0:a0:6b:f6:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Aug 4 04:01:30 2025 GMT
Not After : Aug 5 04:01:30 2025 GMT
Subject: CN=946e7fdfcc9b3030bb21e89aaa1f08c813dd6576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:c1:e6:74:7c:de:21:b9:69:be:4e:f2:c0:
7c:4b:4b:15:5e:bf:6b:fb:be:59:f6:24:49:2b:80:
9f:37:c8:47:0a:04:40:06:f4:47:c7:37:40:eb:03:
e9:35:ec:21:22:c3:4d:b9:27:11:ba:f6:82:bf:ff:
4c:df:db:65:0c:64:6e:21:74:7c:2b:b3:60:38:6a:
e4:e6:3a:6f:86:5f:df:fc:01:0a:e6:40:f9:13:27:
f2:a4:4f:97:8f:cc:af:cb:51:76:3a:09:89:ef:80:
47:37:89:bf:a5:13:db:91:75:03:e8:0e:c2:1b:f4:
a5:47:ea:66:17:14:5d:bd:8f:8c:ae:42:23:cc:b5:
0e:d9:36:b6:6f:56:55:06:2a:c8:17:b6:b5:33:7d:
19:20:fc:a4:ea:f9:62:8a:b1:7f:9e:78:54:98:95:
fd:59:bf:1e:c5:1e:e5:58:48:23:2d:bf:71:3a:fd:
3a:e4:65:bf:be:a7:28:41:3d:ab:a2:a0:24:15:d7:
4b:05:06:1e:f5:4e:1a:18:cf:60:04:4e:8d:d4:8a:
19:2b:12:30:1c:b2:32:8b:aa:fc:97:f0:96:32:79:
f7:52:2a:c9:e3:e7:1d:f3:96:5f:dd:2b:0a:03:4d:
d6:f8:ce:6f:c4:66:46:26:ec:42:6c:3f:9b:d2:44:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:7F:DF:CC:9B:30:30:BB:21:E8:9A:AA:1F:08:C8:13:DD:65:76
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:61:40:fc:7d:03:13:ab:7b:1d:6d:e9:2e:be:01:46:7a:0c:
ad:eb:ad:20:ca:42:74:ee:58:86:67:63:cb:57:60:43:bf:dc:
99:8d:02:ee:ba:cf:a3:49:de:d3:80:fb:e6:a2:39:75:9e:b7:
d5:3e:68:45:00:f6:9f:59:a7:cc:6b:ec:c4:e1:23:f4:0d:9f:
33:ca:be:8b:ca:cd:90:18:ee:8f:0d:2e:4a:29:30:a1:e2:2a:
8b:62:8d:f7:0d:21:cd:87:30:c3:11:32:58:66:75:c0:3b:cb:
ff:d1:6e:60:05:4b:cc:1e:eb:4c:1b:a6:52:67:ca:8e:09:53:
62:c5:e5:88:8a:bd:b6:80:28:ec:3f:b9:fa:2d:d1:e6:bd:9b:
0e:75:0f:86:f9:66:4e:31:1e:06:61:ed:81:0a:06:fe:6a:a8:
d5:ad:85:c0:7c:1e:76:4a:bc:37:78:55:04:f8:3b:19:ab:c7:
37:77:4b:13:5c:f6:be:27:64:38:fc:d5:c4:aa:e6:4b:17:4b:
3a:59:2d:38:95:5e:30:87:47:2d:cb:8a:12:19:86:11:57:ec:
4e:38:ae:5d:95:03:dc:66:15:06:5f:a6:d4:d6:c6:65:57:42:
b5:05:5e:81:8a:9d:f5:6c:18:2d:50:43:13:2a:cb:c5:67:14:
d3:e2:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:29 2025 by rpki-client