Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: 3xxt6FgGcA0juM5Wr5eT0p8MqI+c90LM68BtWN7UYqE=
Subject key identifier: B0:BD:33:D3:A5:EB:3F:62:58:FB:3E:00:AF:7E:45:7D:AB:81:76:3B
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01988AA0CADA6376AB360E5B9B45454A381B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 11D0
Signing time: Fri 08 Aug 2025 17:00:49 +0000
Manifest this update: Fri 08 Aug 2025 17:00:49 +0000
Manifest next update: Sat 09 Aug 2025 17:00:49 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: 0pQMqew53fWeIA2A47+p8TnIEBl+BGPIRxHDgTcpb1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:ca:da:63:76:ab:36:0e:5b:9b:45:45:4a:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Aug 8 17:00:49 2025 GMT
Not After : Aug 9 17:00:49 2025 GMT
Subject: CN=b0bd33d3a5eb3f6258fb3e00af7e457dab81763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:5f:f6:01:f4:39:5e:e3:ab:c0:ea:f3:c5:
42:10:15:69:20:22:13:3f:11:cc:48:d2:77:45:ba:
55:6a:74:56:08:35:3d:da:0e:d6:83:ed:4d:0c:41:
78:a5:3b:8e:ed:5d:a6:d3:76:69:01:44:21:db:60:
fd:b2:83:3d:f4:11:64:79:4f:2e:b1:a6:e5:14:b7:
c7:7e:1c:7b:af:77:93:1c:11:4d:0c:3b:9a:a2:29:
aa:48:9f:c8:23:00:5e:6e:00:2f:cb:2f:7c:f2:85:
d2:29:af:4d:00:1f:5a:94:7b:51:54:3e:20:3d:47:
e9:08:c2:e8:01:5c:28:ca:64:51:d7:e8:69:af:ec:
a8:98:d7:d2:04:a3:3d:ea:10:f9:19:fe:23:cb:86:
57:e0:fa:fe:e1:9d:b2:eb:69:89:4a:b7:ef:de:83:
70:f2:e4:a8:6a:35:7d:f5:8c:06:49:48:a6:ab:3f:
7f:45:c3:2e:3d:91:7b:63:57:b9:3b:02:31:90:2b:
d3:fd:fa:f0:d9:09:ef:f0:1e:2a:47:09:e4:18:9a:
1d:1c:18:57:a6:be:7a:4c:2f:7d:0a:32:c1:df:08:
45:84:cd:7b:3e:ca:2b:02:a9:ad:89:f9:d3:f4:5b:
ee:a4:5a:9b:c8:20:34:0f:f4:b5:06:f0:5d:c9:d7:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:33:D3:A5:EB:3F:62:58:FB:3E:00:AF:7E:45:7D:AB:81:76:3B
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ba:22:57:52:8d:f6:f6:6a:fe:5f:6d:c7:c3:b8:70:0e:2d:
16:7c:cf:cb:fd:eb:2f:96:e4:75:1a:57:9a:b6:b6:ba:8e:f8:
4e:20:e6:bd:5b:99:80:41:dc:58:dd:b7:15:28:a7:22:e5:66:
40:33:14:e3:97:9e:8b:2a:81:d4:57:b2:10:07:a9:b0:6d:5d:
12:4f:4b:49:97:18:76:41:48:98:ca:e9:fd:a5:6c:59:b1:57:
6e:1d:3f:f5:23:ec:83:ee:03:14:a6:32:92:3c:3e:a3:03:f1:
92:df:e2:55:18:36:83:0c:92:26:60:5c:fc:3d:ee:c9:41:ef:
a8:82:36:d7:8d:d7:24:9d:82:fa:77:10:17:71:35:fe:4b:25:
d2:e4:61:68:c8:a0:cb:be:64:93:97:ae:20:68:83:27:0d:6d:
ab:b6:9b:3f:10:8d:8a:55:10:4a:f1:8a:9f:21:7b:40:98:e6:
63:22:1c:34:d3:80:56:1b:d4:f0:fc:28:35:42:f9:c8:0a:61:
ee:6f:10:0b:03:29:70:6c:45:ab:4f:4e:17:af:95:df:a9:b4:
7f:9b:77:4e:4b:5f:0b:c6:50:9b:c9:40:44:23:b5:bf:a5:f9:
aa:e1:96:a7:bd:e6:25:42:83:73:90:71:13:60:91:80:f2:43:
4e:38:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:40 2025 by rpki-client