
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: yzsT/hsfS3+B6uVd5Mbo/Ulx4WTvTYG7ORVFk2X9yyI=
Subject key identifier: D7:AD:5F:C8:B1:CC:AF:FF:65:CA:B6:2F:5F:12:59:81:36:C8:36:25
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 0198744FDA6AF0C4B888CB7CD3531F152F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:46 +0000
Manifest this update: Mon 04 Aug 2025 09:00:46 +0000
Manifest next update: Tue 05 Aug 2025 09:00:46 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: zDJjWBjJzQGMz5sIBZk4j9dKiY80FyiJOex2iJfq+TQ=)
2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:da:6a:f0:c4:b8:88:cb:7c:d3:53:1f:15:2f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Aug 4 09:00:46 2025 GMT
Not After : Aug 5 09:00:46 2025 GMT
Subject: CN=d7ad5fc8b1ccafff65cab62f5f12598136c83625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:6a:7c:3f:1a:28:86:98:20:17:bf:2b:0a:
3e:bb:a7:81:a7:2a:86:87:2b:f8:77:17:5a:dd:bb:
13:33:67:79:58:dd:0f:bc:a5:77:c1:65:c5:e8:6f:
8f:a3:80:a2:a7:30:64:49:5c:8a:2d:fb:72:1e:58:
01:83:e0:09:9f:3e:12:33:df:40:e6:78:8f:f7:56:
4b:e6:45:e5:9a:a2:55:9b:54:62:73:74:f5:d6:34:
a5:d8:10:1a:21:c2:8f:4c:22:f4:4d:81:a0:6a:49:
97:22:ca:ae:9e:66:0b:59:b2:84:3d:0e:10:dd:9e:
6f:1c:7d:53:2b:40:78:ca:f1:92:d9:54:cc:5c:20:
09:c1:f1:bf:6c:91:fe:e7:8c:11:a5:04:b9:e4:c9:
85:f8:36:6c:86:49:88:e8:8b:7c:d1:0d:60:60:07:
2a:52:9f:82:8c:29:f2:61:c0:2f:15:e4:c3:a4:5a:
d0:6c:31:9d:8c:6f:d1:91:87:cb:9c:7c:9e:00:af:
29:06:71:e7:ad:fc:a5:6f:03:0e:ab:3a:8c:c3:df:
fa:e5:37:d2:11:2b:81:d2:94:c8:90:3e:e0:f7:2a:
30:02:ca:48:69:a1:8d:7c:7a:12:98:a9:3a:d1:6c:
2e:73:0d:54:eb:cc:a6:40:fc:3a:8c:c8:b1:05:e3:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AD:5F:C8:B1:CC:AF:FF:65:CA:B6:2F:5F:12:59:81:36:C8:36:25
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a9:47:0a:d6:58:c3:b5:db:5a:3d:6b:1d:00:ea:1e:ff:00:
cd:30:3e:ee:da:73:a6:27:41:bd:4d:96:a4:74:da:d1:bf:dd:
8a:0b:6d:4a:3a:a2:1e:06:25:ac:1b:8c:ab:ba:61:2f:50:7a:
eb:49:3e:d4:98:7d:61:83:b1:36:60:47:a4:78:6e:4e:f7:52:
a3:05:f3:02:3e:a6:10:ff:3f:26:19:26:d2:26:ec:26:a3:97:
b2:b1:f4:7d:e6:db:3e:01:34:c8:50:f8:bd:54:1d:41:db:42:
c7:3f:a5:53:60:c8:cc:4b:b8:4e:03:31:ef:3e:ef:1d:cc:5f:
fe:25:b9:7c:72:5e:bd:e2:a9:fd:b8:ae:7f:11:c8:b0:c9:d2:
85:d3:ef:26:39:e9:10:5f:3f:ff:f8:8d:d9:0d:96:b6:5c:05:
95:b4:ba:44:e2:64:9f:82:86:2c:e2:ad:26:63:1f:24:fd:32:
a1:6c:ee:cd:7b:98:9c:4a:50:dd:17:d5:63:15:06:50:ef:b2:
97:41:cd:50:44:dd:15:de:b9:fa:04:37:b3:64:70:90:de:4c:
8e:c0:b5:a3:3e:5d:58:7c:39:d6:fb:76:78:e0:52:09:78:63:
47:5e:20:8e:8e:b0:e3:f3:16:6f:23:8e:f9:cc:b7:32:e0:e9:
d0:1a:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:17 2025 by rpki-client