Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: 5j8nvjoBKPZwIGIF/BpMb34M0jpVfztsS0swbGALyzE=
Subject key identifier: 4E:1C:D6:41:C8:8A:A3:D6:0C:5F:75:A5:C6:71:41:43:B8:17:CC:47
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 01987450A085C87CAFEF162268AE1A5C6CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 0346
Signing time: Mon 04 Aug 2025 09:01:37 +0000
Manifest this update: Mon 04 Aug 2025 09:01:37 +0000
Manifest next update: Tue 05 Aug 2025 09:01:37 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: lTT2+xxmH3T+dZqzmGACd1bUFCdIWXU9bMC+83ZJqKw=)
2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a0:85:c8:7c:af:ef:16:22:68:ae:1a:5c:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Aug 4 09:01:37 2025 GMT
Not After : Aug 5 09:01:37 2025 GMT
Subject: CN=4e1cd641c88aa3d60c5f75a5c6714143b817cc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:d6:b4:ce:61:ad:1e:bb:36:74:16:ee:0f:
c5:f2:ff:63:8c:eb:4d:0d:a0:13:c1:3d:24:2b:8b:
4d:f5:1a:93:af:40:52:1a:24:40:e3:46:ba:7b:0f:
39:18:bb:91:7c:f0:7e:15:7d:dd:43:58:22:4d:e3:
1b:37:03:27:ea:98:0a:bf:b8:76:d3:5e:cd:e2:bb:
4c:8e:7d:01:0e:b4:c5:75:70:d0:10:86:31:5a:15:
09:85:1d:31:b3:d2:45:76:e4:f0:2f:4d:0e:b6:40:
fa:2a:59:20:ca:00:21:86:a5:12:b9:0e:cb:f1:c4:
d0:2b:0a:da:fc:d0:a6:84:9a:06:5a:ab:f1:4f:dc:
d3:17:b0:5b:46:c5:66:d9:47:a5:ab:15:18:3e:4a:
36:59:a9:a5:29:38:8d:56:34:e8:4f:16:4e:ff:30:
c9:a9:26:cf:45:20:c1:86:b1:aa:66:d0:d9:69:de:
c0:35:ae:82:46:0a:8d:89:74:dc:f2:88:eb:f0:ce:
b1:97:d6:d6:88:e4:3b:51:18:0a:e4:b0:e4:f9:d8:
72:b5:5b:1f:b4:06:2b:72:e8:b1:bb:91:89:a9:af:
de:23:d0:e5:a0:2e:12:c6:f8:c9:4b:b0:ed:2d:f7:
5f:db:9a:1a:72:a6:2d:fb:7e:51:d6:9d:2f:45:5c:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1C:D6:41:C8:8A:A3:D6:0C:5F:75:A5:C6:71:41:43:B8:17:CC:47
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:17:70:44:a8:97:6f:5e:c3:d4:ac:6c:77:d7:71:59:d8:
4b:ae:01:05:bc:69:3d:63:91:ff:ce:23:d0:c0:fe:98:0a:24:
ae:43:0a:ec:11:59:ab:de:d5:43:3e:da:b1:f4:bb:e1:d6:42:
18:99:c8:4e:f8:94:d7:b2:89:b2:b4:87:a5:04:98:e6:19:8d:
7c:08:7b:bf:64:74:45:ed:b8:73:f4:f4:33:bc:20:13:b0:42:
b4:eb:00:28:ed:0a:f8:40:b2:2f:9b:fa:67:cf:16:fd:21:85:
8c:8f:d3:22:d2:3a:17:2e:e7:90:68:14:73:81:57:04:58:6a:
e3:36:7f:4f:58:b5:55:fd:63:79:ae:72:72:24:19:30:6d:8d:
d1:e0:12:06:75:dd:65:42:71:e4:62:26:a8:a4:22:b8:2e:b1:
69:b9:f8:46:dc:3a:ca:bc:62:39:26:53:d1:13:94:38:cc:ed:
2e:fc:84:1e:d2:47:da:1b:f8:50:8a:d0:83:83:90:5a:38:00:
a9:05:7e:c9:ce:d5:ad:8b:d6:dc:e7:ca:cb:90:4b:f6:97:22:
60:c2:b4:6a:66:2c:76:96:2c:4c:3e:4e:00:08:0f:a2:96:d1:
66:5b:6a:01:0c:38:c8:2b:94:5b:53:de:fa:8f:0e:86:de:48:
21:46:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:48 2025 by rpki-client