Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: vZ764mpflZ1J9DaCruatr4dsTuCbQVm6wcXRqQ0QG94=
Subject key identifier: 6D:44:F8:AF:F3:5E:AC:08:65:F9:B4:9C:CE:54:0A:90:4D:72:4F:1A
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 0198722A54EE9EDFD664441C514EF31E0FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 15FC
Signing time: Sun 03 Aug 2025 23:00:33 +0000
Manifest this update: Sun 03 Aug 2025 23:00:33 +0000
Manifest next update: Mon 04 Aug 2025 23:00:33 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: +3UvVo1/Uuw/LIdnZ6nG2xBxCcFOhdXTn8hJYGGQupU=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:2a:54:ee:9e:df:d6:64:44:1c:51:4e:f3:1e:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Aug 3 23:00:33 2025 GMT
Not After : Aug 4 23:00:33 2025 GMT
Subject: CN=6d44f8aff35eac0865f9b49cce540a904d724f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:0f:bb:c9:81:9b:8e:fd:ce:fe:13:f4:35:
3a:c4:5e:f2:4a:8f:8d:8f:a3:e9:5c:99:ba:c6:8e:
f4:d3:0f:ca:ef:85:a6:46:a8:67:0b:2d:42:ff:fb:
4a:27:fc:66:7a:6e:84:54:c8:07:e2:0c:bf:c7:7b:
64:7a:73:88:53:60:d8:7e:30:1c:83:9b:b8:3c:b2:
88:b7:40:03:e6:98:71:85:61:3f:a9:ac:d0:95:2f:
63:3a:4f:e9:ed:5d:b2:51:7f:c7:45:26:26:ba:61:
e5:63:9a:9a:3f:25:93:bf:19:7b:53:dc:76:23:c0:
fa:c5:92:c4:16:18:8f:5c:e3:68:b3:a8:68:4d:12:
b8:4a:3f:b7:14:3a:80:82:df:eb:83:ea:da:1c:d1:
91:0d:36:ce:47:8c:4c:1b:55:fa:8c:00:72:4e:c3:
54:6e:12:2c:36:35:82:d4:28:b4:26:41:86:f0:30:
4b:c2:0d:ca:eb:4e:75:cd:64:a4:a3:20:85:de:bd:
63:b5:18:4d:67:3c:67:ac:70:c8:81:1a:1b:dd:38:
bc:d8:cd:d6:90:8e:5a:8b:e9:fd:ea:b6:ad:2c:f9:
bd:ae:6e:94:bb:1d:35:89:98:b1:34:1a:aa:75:7b:
ea:91:9a:de:8e:bf:a0:00:64:a3:a4:34:41:9e:f9:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:44:F8:AF:F3:5E:AC:08:65:F9:B4:9C:CE:54:0A:90:4D:72:4F:1A
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:23:6b:af:59:3b:d8:b8:ac:ca:a5:88:9f:8d:79:7c:33:19:
dc:52:0f:6a:e2:fa:3f:5d:68:a7:85:69:db:dd:1e:89:1b:88:
c1:08:c7:e5:98:9e:f6:0b:6a:f9:9e:0e:18:f9:b9:9f:80:b5:
04:21:0d:bf:9f:42:0a:eb:bf:3a:65:7b:f0:ab:e1:c4:37:44:
2f:7c:58:4b:53:fc:10:8a:6f:89:97:22:05:4d:2e:6f:cd:c3:
2f:d7:0a:96:a3:4d:b8:fe:2b:ff:f5:2d:75:ce:cf:24:c5:7d:
9d:d4:85:52:9b:c5:39:f2:fc:ad:40:ce:0b:4b:7e:b0:6b:77:
0a:d7:16:c9:24:8d:f8:ce:b1:c0:11:9a:2a:ff:7b:84:b4:10:
a7:c2:65:cf:49:01:10:b1:90:4a:b9:c7:8d:92:00:52:aa:7b:
95:f4:87:8d:a2:c4:d7:3b:ca:80:f8:5a:73:0f:9b:c3:f9:fd:
bf:7c:1c:f4:7a:a4:b1:c8:bb:c2:42:96:89:7d:39:a2:68:13:
33:51:03:fd:a2:a2:bb:19:0c:10:ba:7f:94:a3:dc:0a:a3:79:
e7:95:10:02:99:d5:6f:19:f1:22:7d:68:a2:ff:65:fb:d1:fa:
85:80:ea:df:b2:0d:e3:93:73:d1:11:85:72:4b:ce:b1:c8:84:
28:5e:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 04:13:50 2025 by rpki-client