Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: AgK5OKSr2LBRzdVaeiYOZBjPnl8RPsHsT1yS8qh9OkQ=
Subject key identifier: EA:CE:C5:56:75:00:5A:C5:F8:99:3A:73:F8:F2:94:16:82:60:7C:DD
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019872CFBD995077A234A7A8B92D65788061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0CD5
Signing time: Mon 04 Aug 2025 02:01:13 +0000
Manifest this update: Mon 04 Aug 2025 02:01:13 +0000
Manifest next update: Tue 05 Aug 2025 02:01:13 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: A8/acGyUNMqyZcrVltnfKWIWjAoYWAn0MdG5p9qvJnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:bd:99:50:77:a2:34:a7:a8:b9:2d:65:78:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Aug 4 02:01:13 2025 GMT
Not After : Aug 5 02:01:13 2025 GMT
Subject: CN=eacec55675005ac5f8993a73f8f2941682607cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:c3:59:38:d0:58:b7:18:4e:d7:c6:6a:2b:
c8:02:5c:dd:ae:73:4c:ed:bb:74:a2:6d:b5:6d:96:
4e:d3:52:d7:e3:23:f3:71:6d:50:7c:28:9f:83:a5:
11:37:c9:da:4f:cf:5c:01:3a:4e:4d:04:05:ef:08:
da:b0:40:d6:04:73:7e:75:67:59:36:fd:af:27:8f:
9b:20:0f:37:75:fe:76:af:29:f6:d8:81:d3:80:76:
0e:db:08:b4:bb:75:fa:b6:8c:66:98:15:ad:7f:27:
cf:52:02:dd:2e:53:e3:ea:6e:ec:a7:82:4a:84:80:
1e:a2:ca:25:fe:1f:ee:94:3a:0b:04:69:bf:a4:d0:
76:cd:47:ab:cb:fc:0e:e7:ea:22:2b:24:ae:c5:4b:
28:f2:1a:39:22:98:12:77:aa:24:7e:0f:97:7f:6f:
56:4a:76:c0:ab:58:33:16:80:94:c4:c3:f7:d8:fa:
a6:d2:ce:c6:51:6f:4e:f5:e0:81:94:31:a1:24:00:
eb:ea:e7:c6:3c:50:9b:c4:36:39:91:45:e9:a6:38:
19:06:e7:0b:b8:64:39:61:34:aa:ae:13:77:61:80:
5a:23:a0:d0:60:84:e2:5a:9b:5c:17:91:5f:52:f3:
1a:9f:86:89:3d:bc:f5:89:01:1c:52:d5:6d:c4:db:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:C5:56:75:00:5A:C5:F8:99:3A:73:F8:F2:94:16:82:60:7C:DD
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:88:8d:02:37:25:b5:8e:52:e0:bd:87:65:95:ce:89:00:32:
5a:16:43:b4:65:24:c1:33:80:fa:13:81:1e:52:39:4c:87:1e:
b2:81:cd:9e:d6:28:3e:3d:f7:dd:ca:47:58:be:13:57:3a:c5:
18:15:51:bf:14:80:89:9f:dc:c1:5c:b0:94:d5:b6:95:73:a1:
4d:14:fe:1a:e8:c2:d5:22:1e:38:4e:01:50:c7:3a:c2:25:9a:
26:c6:99:49:52:b7:e2:c6:11:2a:74:6f:bf:27:81:9d:9d:ab:
6e:a0:bb:4f:cd:ec:d3:f6:d8:bd:35:c4:20:fd:20:fa:32:b6:
a6:f2:28:3e:3a:d2:cf:78:c2:57:53:f7:00:e0:ae:08:e6:09:
8f:3d:ec:2f:bd:73:65:ab:f7:7f:8e:d8:4d:0e:b3:c7:40:59:
56:9f:ad:9c:47:bd:ce:07:8a:b4:2c:a6:1c:55:97:4f:8e:4f:
ad:82:8d:59:73:9e:eb:0d:f2:d8:9b:3e:ce:c4:26:c4:82:cd:
3a:98:b2:e9:a1:e3:4c:30:f9:8d:b0:69:09:9e:9d:85:ab:8d:
12:f4:32:a2:52:a2:41:73:fe:db:39:10:07:ba:26:1b:1d:ac:
a2:5c:6a:88:d1:a3:3b:95:62:2c:0b:80:c2:45:11:ad:c8:8c:
7d:c2:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:17 2025 by rpki-client