Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: RW3HZXxlxnECE2xM4pTBhJVieWtZbBG8cAmsLbe0P8s=
Subject key identifier: 9F:95:4C:41:4F:BF:94:55:91:A0:A8:1B:63:80:32:4D:AA:4E:51:E4
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 01988DD913CEE114D8BFD1C5FF3A249C480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 08EE
Signing time: Sat 09 Aug 2025 08:01:10 +0000
Manifest this update: Sat 09 Aug 2025 08:01:10 +0000
Manifest next update: Sun 10 Aug 2025 08:01:10 +0000
Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: Uu6pNdYLrZtd6A4pp+Fh6Gui3QyFzp8DMH9mtAZpo1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:13:ce:e1:14:d8:bf:d1:c5:ff:3a:24:9c:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Aug 9 08:01:10 2025 GMT
Not After : Aug 10 08:01:10 2025 GMT
Subject: CN=9f954c414fbf945591a0a81b6380324daa4e51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:d3:9b:18:92:a2:92:4b:94:a5:65:0d:e9:
2f:12:80:71:41:71:44:70:ae:9b:36:a7:ce:ce:e8:
90:1e:2a:2e:02:1d:1f:eb:6c:07:dd:b8:36:d8:1f:
f3:f2:f2:4c:89:46:9b:8c:8c:d7:92:58:18:1a:d6:
53:e4:ac:d8:df:8b:4a:de:fe:f5:73:4b:59:b7:d6:
41:f0:66:54:44:ca:81:d2:ec:79:b2:66:00:47:14:
88:2b:1c:97:01:60:e0:33:42:1f:98:3c:e0:7b:7b:
3a:95:13:c7:62:a0:82:cc:c4:5f:9f:45:c6:6d:69:
b4:64:94:59:a9:20:7d:d1:dc:45:c8:2a:57:c1:e9:
88:b1:d4:b2:15:de:5c:21:7a:21:2d:36:c0:2e:ab:
77:41:b7:fd:d2:a0:16:44:ef:e3:31:30:ed:5a:d3:
c5:49:21:51:e3:87:ce:e0:93:bf:53:6a:15:31:de:
4c:98:29:41:35:59:1f:7f:aa:e1:53:62:d8:68:5e:
31:b6:12:2d:8b:3a:fa:eb:74:0f:5b:7e:54:f7:12:
fb:b8:44:d9:75:8e:4e:dd:a0:14:6f:8e:dc:79:4c:
ef:0a:3e:6d:dc:ca:1e:ba:b0:c8:b4:3d:1c:92:4b:
59:11:8f:0e:01:4d:8b:ab:f3:3e:9d:69:48:b5:02:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:4C:41:4F:BF:94:55:91:A0:A8:1B:63:80:32:4D:AA:4E:51:E4
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bd:23:8b:4c:4f:fd:db:03:33:b8:52:27:8b:32:72:eb:37:
99:97:3d:5b:22:86:3f:70:02:63:4c:6c:eb:0b:61:3d:21:2f:
62:68:55:c2:f7:af:00:67:c6:f8:3a:6b:82:5c:8f:dc:d0:f4:
4b:ed:07:53:18:25:58:af:5e:c1:47:af:88:ff:71:67:8d:82:
28:74:b4:38:82:71:c7:5a:56:ad:cc:e9:97:32:19:42:af:41:
01:74:25:48:c7:03:e5:0e:64:63:73:ca:9b:89:54:56:76:3c:
58:9c:ce:58:5e:c9:86:61:f3:fb:f7:11:5e:e5:b2:a9:a6:fb:
88:08:27:98:49:fc:d4:4a:45:db:81:70:f0:41:ba:84:65:5a:
62:42:bc:4d:4e:1c:3a:05:fd:10:56:05:6a:34:f1:e0:43:ff:
a2:cf:98:fc:f5:f5:be:4d:af:99:48:d7:62:bb:c9:4b:a2:b3:
ee:cc:68:3e:8f:fd:3c:bd:13:0d:e7:50:ef:f7:b5:80:ea:4d:
63:8b:b2:66:96:2c:77:bd:11:1f:e7:d5:02:b6:8e:17:f5:eb:
5c:7d:14:7a:9f:6a:56:88:c5:77:79:3e:49:86:5f:87:4b:6f:
f3:9d:55:b0:42:0c:c3:62:ff:8a:79:35:a9:df:80:a6:f4:99:
d2:31:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:12 2025 by rpki-client