Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: kiWez0K7LD3q4VBi0qML1TVPc5DyZnK9w+EDbxMWazA=
Subject key identifier: 97:F6:DE:1B:C7:2E:25:13:98:21:FA:36:8D:56:3D:76:02:B8:80:17
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 01988B45AB045635DC0683734CCBD06A59A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: 0371
Signing time: Fri 08 Aug 2025 20:00:55 +0000
Manifest this update: Fri 08 Aug 2025 20:00:55 +0000
Manifest next update: Sat 09 Aug 2025 20:00:55 +0000
Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: cpfThHsuRzfhxNvrGy8sjP5FCLjoLybMwEzttGXe8+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:ab:04:56:35:dc:06:83:73:4c:cb:d0:6a:59:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Aug 8 20:00:55 2025 GMT
Not After : Aug 9 20:00:55 2025 GMT
Subject: CN=97f6de1bc72e25139821fa368d563d7602b88017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:d7:b7:60:65:07:2e:cc:f3:8a:72:f1:08:
ab:77:23:73:70:c2:34:93:07:fc:fa:ed:50:b9:9b:
82:90:de:0f:1f:81:56:f8:05:ca:d5:af:44:5c:8e:
1b:57:90:79:ac:f3:54:f7:60:e1:a4:90:26:57:2a:
a3:95:bc:30:56:15:3b:b7:4c:15:11:d4:ce:3d:f6:
07:13:79:6c:d3:67:7a:a3:86:77:05:7e:28:93:56:
7a:22:07:6e:b9:8c:4b:81:e5:62:55:06:b4:8b:99:
07:1a:5d:8a:a0:87:76:f3:75:4e:b8:9a:4c:e2:a1:
7b:f4:8e:07:40:05:2c:e5:f9:63:91:17:49:db:d7:
c3:93:1e:bb:ef:41:04:80:34:a0:29:40:d6:56:43:
48:7d:95:75:81:d9:b6:77:69:1a:0b:88:ef:83:63:
14:60:d9:bc:eb:4d:ba:52:bb:3e:a2:52:bd:ff:65:
ad:3e:90:71:5f:8d:43:55:b1:af:5c:78:8d:e4:e5:
58:25:e3:3a:cf:23:0f:c1:45:9c:b8:32:fb:63:5b:
85:ba:f2:14:e9:1b:d9:6f:74:a7:f8:80:ba:cd:a1:
a7:bf:60:14:d8:d4:c4:9d:27:de:78:5b:16:6e:43:
c5:29:0b:1d:72:26:3a:51:50:c8:76:ab:ee:01:67:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:DE:1B:C7:2E:25:13:98:21:FA:36:8D:56:3D:76:02:B8:80:17
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:76:5c:e3:c5:ed:8f:59:ff:02:fe:47:1b:ea:12:4c:c2:
d8:9f:6d:ea:5e:2c:e3:36:70:24:c5:c1:ce:83:6b:d2:73:94:
93:1c:fa:8c:4c:32:51:a3:66:22:07:32:d9:2f:54:64:43:f1:
ec:82:1f:6d:e2:18:07:96:ea:71:c2:f7:5d:96:12:69:f5:8c:
5d:0b:85:f0:5c:29:54:96:b3:6b:01:23:be:35:67:28:c7:a0:
a5:b7:f2:c8:82:c2:6c:98:68:73:ff:bd:5c:92:70:48:ee:37:
e1:06:c8:c5:ab:1f:a2:5c:c4:49:60:a9:bd:19:c0:56:b9:c1:
41:0a:69:3d:88:36:c3:50:31:cf:a7:bd:29:1d:68:6a:c3:0e:
f3:68:b7:bc:76:32:1e:fc:6d:4d:0d:7f:13:99:a4:bd:a9:dd:
55:8b:f3:87:0c:48:35:4a:46:4b:28:d8:9c:97:f8:f1:51:82:
b4:12:7d:f1:b4:11:19:4c:17:d1:8c:98:1a:fb:bc:4c:df:61:
fc:4d:45:f7:cd:02:f3:55:54:21:38:0d:32:ff:d8:01:53:3c:
f7:3f:1b:f0:6a:39:8f:d0:26:d0:9a:cf:c1:05:6b:e5:90:56:
e6:c9:fa:a4:a1:40:b4:cb:3a:08:bd:1b:72:0e:62:9b:76:66:
0a:cc:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:37 2025 by rpki-client