Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: 7CiAKQCVSsfWkOjJviJ0SNvzY3fz9icQOV/j/1MaJIQ=
Subject key identifier: BF:B7:39:71:FF:2A:40:EF:D4:AE:F6:07:0E:87:1D:BA:C5:58:EE:53
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 01987374AA22521426DA2396E7AB37868771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1348
Signing time: Mon 04 Aug 2025 05:01:22 +0000
Manifest this update: Mon 04 Aug 2025 05:01:22 +0000
Manifest next update: Tue 05 Aug 2025 05:01:22 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: Siln5gerPXC/eEyeuG1omrUdBW8TLp8BupGpftDwd7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:aa:22:52:14:26:da:23:96:e7:ab:37:86:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Aug 4 05:01:22 2025 GMT
Not After : Aug 5 05:01:22 2025 GMT
Subject: CN=bfb73971ff2a40efd4aef6070e871dbac558ee53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:7a:51:15:09:6d:e3:48:23:a3:35:8d:30:
40:7b:bf:32:12:4e:d3:06:76:fe:66:6d:1d:9a:dc:
88:ca:50:85:ff:1f:29:96:54:01:24:ac:4c:70:6e:
dd:87:06:b2:9b:39:71:38:71:a1:38:2a:79:8c:7f:
78:cf:99:46:2e:f5:aa:46:9a:e0:0a:d1:3c:8f:25:
00:48:b4:a1:2d:dd:d4:9c:1a:c1:58:ec:84:f4:c4:
45:4b:6a:91:af:b7:64:e6:a4:a9:c3:69:2c:3d:96:
92:66:6d:d8:59:ac:47:76:e2:9b:01:4a:d7:57:7c:
3b:0b:e6:46:c8:10:bf:de:07:85:34:ba:e7:3c:b7:
db:27:ae:0b:45:49:56:4c:1b:3e:a1:db:00:5e:87:
49:b8:ad:a8:06:a5:e7:c4:b2:7a:44:ea:ea:1b:2b:
c1:0c:0a:eb:12:12:6a:63:3d:68:31:9b:cd:b0:fa:
7a:78:8d:76:5d:06:2a:5c:8e:d2:ea:b3:87:84:00:
0b:ae:d3:3c:3f:e4:ae:09:d9:94:bd:41:0b:d9:78:
ce:0d:f7:86:72:25:47:12:64:17:82:94:f6:f6:e8:
22:b6:fe:5c:f3:59:78:b4:91:92:f0:61:3f:f5:08:
9a:e2:b3:e9:ab:b1:72:e0:fb:0e:cd:a6:e7:87:7c:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:39:71:FF:2A:40:EF:D4:AE:F6:07:0E:87:1D:BA:C5:58:EE:53
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:62:11:b7:68:0a:98:de:68:8c:b6:35:bb:57:9e:dd:45:
81:7e:d0:ae:42:d5:ed:0c:69:61:f3:83:8e:6b:a8:10:fe:28:
98:21:35:43:d7:4a:d2:4d:d5:89:a7:67:2f:ce:55:e5:2b:53:
3a:ec:2c:cf:e7:1e:f5:26:96:19:44:d9:d0:e7:95:fa:a2:82:
bd:f9:da:9a:22:2b:2e:45:27:44:70:f4:40:35:ae:7c:f6:b3:
4e:98:92:8a:90:e2:05:84:49:59:87:b2:66:88:b1:cc:70:1f:
36:41:b3:8d:69:22:20:50:bd:df:6e:50:26:dc:09:49:88:5c:
f1:44:46:e3:f5:9f:92:4b:2d:09:7a:6f:91:17:39:a0:93:d8:
b6:e8:55:d4:fa:2a:73:4a:bd:74:f7:d9:43:65:6c:48:ef:7e:
bd:a2:bf:4f:3e:3b:6a:79:e4:6a:0e:42:4f:0e:3a:ee:a8:1e:
94:51:cf:6a:2c:c5:6a:ba:b2:5c:1c:fe:6a:8e:85:c7:5b:09:
f5:cf:71:b6:f3:b9:6e:5a:66:8f:ec:79:3d:df:50:1c:6e:67:
29:36:6e:71:67:ac:a8:c2:32:a5:28:ff:ad:f2:d8:39:19:09:
bd:a3:78:b3:a9:f8:a2:34:7a:92:fa:26:ab:b6:7f:ca:87:8d:
20:29:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:43 2025 by rpki-client