Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: 2VAaM6cQC1xZJQhv82WFSceyZ6Xmx3jdZJYHN1GBq+0=
Subject key identifier: 15:09:9B:7D:CC:6B:5F:8F:20:F4:52:30:32:CB:9A:54:41:51:D0:92
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 019897EEA3D787E7091EB4254972642528A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 153B
Signing time: Mon 11 Aug 2025 07:00:55 +0000
Manifest this update: Mon 11 Aug 2025 07:00:55 +0000
Manifest next update: Tue 12 Aug 2025 07:00:55 +0000
Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: UiuPknsrOJ7V8eX506FZTZs1KpOkQN7QHSH9lj0G/oA=)
2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:a3:d7:87:e7:09:1e:b4:25:49:72:64:25:28:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Aug 11 07:00:55 2025 GMT
Not After : Aug 12 07:00:55 2025 GMT
Subject: CN=15099b7dcc6b5f8f20f4523032cb9a544151d092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:82:98:bd:cd:87:dc:bf:b7:cb:de:a7:b4:
ae:e6:e1:0f:62:e4:72:21:25:39:f0:2f:d9:1f:b2:
78:44:90:eb:29:ea:2e:b2:0b:08:10:7d:97:f5:88:
31:61:ab:de:3c:4e:55:a9:3a:e9:c7:6d:dd:48:92:
db:86:34:4f:08:88:22:02:2f:78:9a:05:c7:1e:90:
37:ff:c0:54:89:29:e6:72:e6:62:ad:39:a9:f2:28:
90:c3:ed:01:aa:a5:12:31:a3:f1:16:db:d4:a9:9a:
a7:77:6b:3a:a8:6d:80:79:11:83:53:07:7e:cb:05:
96:8c:fb:81:a8:14:16:a8:a7:a5:4d:61:a3:cb:b8:
a6:19:d1:01:34:78:3a:ae:1d:35:84:39:3a:1e:01:
7a:1d:02:7f:eb:24:c7:5c:83:1f:6a:d2:bb:a8:70:
7f:07:90:11:d6:e7:29:b2:f7:49:7d:bc:d3:ad:38:
3d:55:12:0a:69:ef:03:fa:61:2f:8f:89:ad:c5:e6:
8f:53:90:dd:a1:08:2f:02:8c:8a:1c:1a:0e:b6:24:
44:ab:bb:80:6c:a8:ea:17:aa:e8:b1:7f:5f:34:db:
3f:a0:4b:08:b2:31:57:03:84:e0:46:9c:e0:79:1a:
14:63:1e:ec:78:2c:f9:af:d8:3a:3f:92:d9:fc:f4:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:09:9B:7D:CC:6B:5F:8F:20:F4:52:30:32:CB:9A:54:41:51:D0:92
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:94:07:69:a5:bc:f8:52:21:63:56:5d:2c:f8:1c:18:30:
49:be:5d:5d:3e:dd:2f:f7:61:61:1f:69:30:3d:7b:be:2f:dd:
da:12:0f:d3:9f:fb:65:8b:a2:9d:16:ab:77:62:fa:d5:8c:aa:
35:01:28:e7:77:d0:21:e0:ab:6b:4b:1d:c4:4e:de:ca:53:85:
07:0d:30:f2:e2:a9:9f:ae:4a:f9:22:a9:88:1a:9d:ee:2b:58:
0f:0b:02:de:3a:a7:cf:f6:47:dc:11:1e:d3:66:08:ff:ea:68:
66:2f:54:f6:ce:0d:3a:1b:ce:1e:50:b5:75:4c:33:2c:ae:3f:
9b:20:0f:58:1e:50:24:a4:f5:be:b1:15:38:2f:99:e5:a8:63:
8c:31:ec:cb:39:29:36:98:28:5f:35:9d:77:5a:e1:f2:cf:e6:
9e:59:b1:c6:a8:aa:02:c8:09:0e:f6:40:20:1c:3c:1f:46:16:
43:67:61:66:e8:cf:2d:b2:37:2b:dd:ad:49:91:92:75:a1:6c:
75:3d:cc:44:43:7f:81:93:23:02:68:e6:8c:c8:63:6b:da:4f:
bc:42:99:7f:9b:3e:5a:f9:d2:84:2e:d3:fd:5a:19:48:81:4e:
6a:8f:98:90:9a:39:01:84:83:29:04:16:1d:20:66:ce:ce:06:
0a:80:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:08 2025 by rpki-client