Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: zjtrvg3IjX0IYTZB6f73CIDJ3ch0TYJJc9IcwSNwuRM=
Subject key identifier: 83:D0:D5:37:0D:2D:37:75:8D:57:4C:D9:5A:A4:96:62:BB:39:B9:5E
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 0198963750D64938FA051731C44DB85913D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 0577
Signing time: Sun 10 Aug 2025 23:01:04 +0000
Manifest this update: Sun 10 Aug 2025 23:01:04 +0000
Manifest next update: Mon 11 Aug 2025 23:01:04 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: eZufefUl80BvRp2bYMQPVPvNZ3KSIgqe6E5DRTAYsRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:50:d6:49:38:fa:05:17:31:c4:4d:b8:59:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Aug 10 23:01:04 2025 GMT
Not After : Aug 11 23:01:04 2025 GMT
Subject: CN=83d0d5370d2d37758d574cd95aa49662bb39b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:d4:63:b3:fb:19:99:9d:7a:c8:58:61:97:
eb:c2:1b:c4:1c:f8:22:40:29:21:68:fb:e7:c2:0f:
d9:37:03:6e:2a:44:cc:db:07:66:92:4f:1d:d9:4f:
e6:c1:cb:1e:3b:82:fe:0a:0e:8e:6d:4c:1c:36:59:
53:6d:f4:fc:ed:c5:53:71:03:b4:38:0a:3f:de:9d:
87:e8:8a:c2:4b:7c:aa:34:a0:e8:7e:c2:97:e9:59:
0f:47:39:3a:ed:d2:c0:bd:62:d2:7b:1d:87:40:c8:
3c:82:5b:62:b9:e8:7e:5b:8d:64:88:46:5f:bc:b3:
8f:4f:4b:0d:1e:18:58:7d:9a:df:84:f5:7b:65:2b:
e3:0a:58:06:bf:03:10:d5:89:b7:66:c9:11:31:80:
80:1a:60:93:39:0f:3f:c2:be:02:fe:ac:23:fa:d4:
bf:62:ae:60:7f:95:aa:68:a4:16:26:97:b0:b5:53:
9b:6a:59:a1:de:39:fb:6f:02:95:24:68:14:f5:51:
a6:ef:d0:76:b0:10:aa:ab:7f:d8:30:72:74:53:ea:
aa:3e:ff:2f:3c:a4:3b:06:1f:3e:a7:83:5e:80:ba:
ea:86:e6:42:cd:94:ad:94:bc:79:42:2c:fe:75:c8:
88:28:20:3c:05:ba:86:00:14:7b:54:5a:26:e9:00:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:D5:37:0D:2D:37:75:8D:57:4C:D9:5A:A4:96:62:BB:39:B9:5E
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3b:4a:60:8b:14:fe:fa:b5:06:96:7c:12:40:61:61:fa:ef:
0c:8a:fb:0c:de:8a:01:69:2a:76:1d:bb:f6:57:63:ac:d2:a8:
30:45:72:33:46:11:c2:63:e2:82:e5:f5:bb:78:2c:d3:4f:a5:
7e:cd:d2:af:33:cc:4a:b7:2b:69:f0:8b:3b:88:d7:99:29:53:
47:3e:b1:04:95:91:fb:fe:fd:51:86:bf:d7:d7:2a:28:57:36:
1f:04:ad:e2:85:54:1a:ce:80:11:15:3d:f7:93:38:e7:2e:dc:
ec:ac:73:10:0a:9b:0d:22:70:0e:fe:f0:9c:ff:3a:e2:d3:b4:
d6:69:93:7a:05:76:1e:91:51:27:f8:11:16:4f:a1:f8:04:a1:
4c:df:44:90:f5:25:99:4c:d1:20:8b:a7:8b:55:3e:2e:4e:14:
ae:aa:2c:9d:8b:8e:72:78:f9:79:03:ac:18:d4:d9:54:01:47:
17:f9:99:a8:33:fc:57:02:07:66:b9:8f:aa:2a:e8:f2:1b:eb:
2b:22:be:03:5b:c1:1f:b1:e4:b8:23:0c:aa:4c:49:0a:6f:a6:
da:02:2b:da:3a:09:2e:5d:f0:ac:6a:50:fb:ab:38:8c:aa:d6:
bd:da:4b:a5:7a:d8:12:52:71:21:6c:db:d7:bb:54:4f:4c:ff:
c2:2b:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:54 2025 by rpki-client