Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: DNRvYYpuFfXPLhn2MfaYD+CVIpr3d6Kt5XMM1cGE/fo=
Subject key identifier: CA:28:93:05:11:08:1D:2A:99:96:8D:4A:4D:18:E3:DF:10:34:67:0E
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 01989336155B2A25F01EF254912111138885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 09:00:51 +0000
Manifest this update: Sun 10 Aug 2025 09:00:51 +0000
Manifest next update: Mon 11 Aug 2025 09:00:51 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: 2IU7wtnWpO9Edl5mG5WzJatAwCPO+S5dTawHSxvyPXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:15:5b:2a:25:f0:1e:f2:54:91:21:11:13:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Aug 10 09:00:51 2025 GMT
Not After : Aug 11 09:00:51 2025 GMT
Subject: CN=ca28930511081d2a99968d4a4d18e3df1034670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:cd:db:56:ac:41:92:cb:df:1c:a0:67:c5:
20:81:a9:08:54:15:11:8b:44:8b:02:fa:82:6f:75:
fa:70:86:cf:17:b9:1d:75:48:4b:0f:74:99:33:11:
b7:6d:5b:a9:96:46:5e:91:f8:de:27:1c:8a:eb:c8:
42:6b:37:f3:00:28:1f:af:86:a3:92:9a:b0:e3:39:
45:7a:82:7a:23:ea:a0:18:1f:88:a7:4b:6c:3f:c0:
70:ad:91:ee:59:8f:d0:81:fb:58:39:0e:52:be:30:
07:f1:05:0b:12:3a:2f:50:1a:75:b4:97:51:bd:6b:
1c:a7:08:e0:83:7f:88:bd:fd:86:3d:c7:87:ee:56:
ea:91:22:24:98:9f:34:e9:45:e7:7e:45:2c:aa:14:
9c:c6:3d:38:c3:14:24:fe:1a:d4:b4:e6:95:8d:7c:
19:1d:21:96:98:0b:ac:c5:10:9d:3f:d1:e0:a9:05:
9e:50:a6:f4:08:32:74:cb:20:48:1e:df:13:dd:bb:
13:c9:f0:50:af:17:ab:a9:4f:5d:a6:6f:9a:f9:34:
ca:66:58:8c:ea:be:fc:01:53:ec:42:c3:69:c6:a4:
88:7f:aa:5e:37:8d:a2:31:9c:8f:b7:2d:d3:85:34:
c2:d0:3c:89:99:58:68:1e:77:46:56:85:25:87:9d:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:93:05:11:08:1D:2A:99:96:8D:4A:4D:18:E3:DF:10:34:67:0E
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:4c:51:ef:9b:6e:29:a1:bd:56:45:61:e3:e4:9e:56:4e:
cc:0c:71:63:15:bd:70:55:9e:02:f3:94:dc:2c:fe:57:f4:8c:
96:83:3c:6c:0c:c5:c8:4e:94:7b:31:c3:dd:b8:d2:21:e4:3e:
9e:c6:b2:bd:8a:ee:40:db:ea:94:27:4d:70:f7:ad:c8:fc:08:
23:b4:fa:f0:fb:99:f8:1e:e3:e0:59:13:cf:0f:88:70:87:81:
59:67:af:49:f4:40:de:6e:3f:94:aa:c3:7a:e3:70:ab:53:c2:
05:67:96:4a:ca:50:28:49:88:7f:12:39:01:ac:e6:08:94:a4:
30:60:9d:ce:1b:30:bb:0e:94:79:01:62:09:44:7d:44:c0:b0:
27:3c:c1:8f:d6:61:f9:04:9b:c0:27:8b:27:47:5e:a0:7c:0b:
a7:82:4a:1b:83:7b:37:79:db:68:84:d7:bc:dc:25:64:ef:cc:
b1:22:42:0a:53:77:9f:7c:2f:46:6f:2f:a1:89:b1:c6:c0:08:
2f:c3:c4:8e:0e:7f:e1:b9:39:c9:b7:32:c6:fb:2f:99:1f:96:
b3:3a:74:52:1e:70:62:06:07:48:d2:4d:dc:cb:9b:60:d1:6f:
69:1d:7e:15:c6:a1:5f:9b:17:0a:61:4e:6e:10:84:dc:5f:45:
05:01:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:51 2025 by rpki-client