Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
File: jljYxh9jNQx3vvHWaxzPpaAODds.mft (raw, json)
Hash identifier: ZHbdvP3nFJOzzp1XqWLdzq2v3gH2mrTYH24aOu/OavQ=
Subject key identifier: 54:79:4A:A9:29:5A:48:46:E0:F9:AA:AD:D4:21:6D:F5:E7:E6:2D:91
Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Certificate serial: 0198952450BD203142A92D9E0382C38CA5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 18:00:41 +0000
Manifest this update: Sun 10 Aug 2025 18:00:41 +0000
Manifest next update: Mon 11 Aug 2025 18:00:41 +0000
Files and hashes: 1: 9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa (hash: CXZ0q1QVdxVDaPhOEyR1OpgzYZ+TJLJ3piBsRyEK14c=)
2: jljYxh9jNQx3vvHWaxzPpaAODds.crl (hash: 9IvhIVr3t0JYSgRuFfIhaoO5LrMV9cdpONP7F+qK5Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:50:bd:20:31:42:a9:2d:9e:03:82:c3:8c:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Validity
Not Before: Aug 10 18:00:41 2025 GMT
Not After : Aug 11 18:00:41 2025 GMT
Subject: CN=54794aa9295a4846e0f9aaadd4216df5e7e62d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:ed:ce:d1:c9:8b:51:fb:91:5f:8e:c7:e1:
33:12:ac:50:33:38:e7:99:53:cd:98:ff:54:8a:41:
6d:f8:7a:77:70:e1:5d:b7:4f:c8:da:ed:32:30:04:
4e:3f:25:cb:1a:a5:51:54:e8:df:ca:37:fb:7f:8d:
40:e0:4f:d9:60:28:d6:6a:38:d8:7b:90:86:d5:bb:
fd:ba:53:39:50:b5:7a:80:14:0e:c6:de:1a:4f:77:
b4:13:d1:fd:72:5a:0d:43:79:ae:d2:3a:e7:fa:6f:
90:7c:b0:0a:70:a8:54:6c:91:29:0f:a2:8b:df:79:
99:e2:33:40:72:96:68:15:59:03:91:3a:df:d0:da:
23:7c:32:93:5c:da:16:b0:c0:a0:4b:09:d7:0a:25:
3d:22:6d:62:fc:60:dd:bf:48:a1:25:fa:b1:74:84:
9e:af:07:17:4e:6c:62:2c:45:12:ce:47:21:f1:d5:
11:35:5d:09:48:bd:c7:3d:f1:ef:fb:7b:30:09:4b:
e9:bb:d0:98:7c:06:a7:18:f0:d8:a1:7f:e3:54:53:
6a:94:de:a3:9a:9d:af:37:bd:c4:8f:80:4a:6a:65:
bf:5e:c9:f6:f4:42:66:c1:73:ee:e7:69:fc:00:95:
44:9e:40:bf:bb:e5:ef:33:7a:8f:50:b1:2e:54:40:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:4A:A9:29:5A:48:46:E0:F9:AA:AD:D4:21:6D:F5:E7:E6:2D:91
X509v3 Authority Key Identifier:
keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7a:4b:b0:bb:5b:e0:b8:fe:b7:ef:db:74:31:fd:dc:92:74:
c6:86:d3:3b:ea:3b:3a:3b:2c:b1:27:18:44:ec:da:1a:0d:1d:
18:92:8a:10:66:06:a2:64:6d:2d:e7:3a:94:df:a9:2a:c8:2e:
1e:39:74:0c:6d:ba:d1:42:0c:38:09:33:bd:1b:f6:4c:81:26:
bb:55:af:dd:85:ac:82:68:8a:69:24:2b:81:81:42:c5:05:78:
be:2a:92:d1:e4:e5:08:25:69:66:f3:d6:d6:3f:46:f7:10:88:
51:28:b7:8f:b3:07:29:43:c3:ee:37:5b:bf:31:22:8d:11:f7:
d7:6c:c8:d3:f6:6b:21:b4:63:17:99:20:aa:df:5b:98:11:d9:
4c:01:25:a7:fd:a6:6d:bd:6b:02:9a:5f:e4:27:c5:27:3a:04:
2f:95:33:23:85:f3:2f:40:b5:43:dd:72:8a:76:88:28:b5:3d:
a7:a1:b7:74:df:04:da:00:24:6f:c7:45:fd:21:d0:67:b5:18:
b6:b4:1d:ad:96:77:72:74:53:61:5d:50:5d:1f:a3:e8:c6:bc:
50:b5:21:d2:75:35:64:34:2b:a8:dd:9e:1f:4b:c4:8f:12:9a:
f7:5e:94:b8:a6:61:91:3b:46:40:da:22:c5:ed:57:a1:d3:f8:
7f:89:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:47 2025 by rpki-client