Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: eeeMhzVMbF/S2F6SvRPlGigXn9OJXs2ZuY7TpoV/THE=
Subject key identifier: D1:B1:D7:B7:21:8C:D3:E9:4D:57:4A:A3:E4:E1:B5:FB:64:3B:CA:07
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01988EB41C46346D73BFF60A0A047DEB0935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 0625
Signing time: Sat 09 Aug 2025 12:00:24 +0000
Manifest this update: Sat 09 Aug 2025 12:00:24 +0000
Manifest next update: Sun 10 Aug 2025 12:00:24 +0000
Files and hashes: 1: AKRmCj_2okX1LO5v9_0H98pYwbU.roa (hash: MEuoJM1Dt+mZUmPv1MilFxcXYi8kFv2K1tyObhJJD6U=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: eBb595ROEjhyzIr1MISxoZJKOmkTGCLErQnZW4g87IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:b4:1c:46:34:6d:73:bf:f6:0a:0a:04:7d:eb:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Aug 9 12:00:24 2025 GMT
Not After : Aug 10 12:00:24 2025 GMT
Subject: CN=d1b1d7b7218cd3e94d574aa3e4e1b5fb643bca07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:dd:24:63:ff:1a:c3:26:77:92:c9:86:ce:
a0:76:c6:25:9c:96:c4:a5:bb:4d:ac:18:dd:7d:39:
53:c8:47:19:88:b4:da:f6:6c:bd:aa:7e:72:ef:5e:
15:77:4e:63:0e:b5:dd:25:8a:05:bb:26:ba:59:be:
f1:a7:ec:2c:b5:e4:97:f6:7c:26:28:9e:41:2f:30:
5d:a0:93:fe:3c:03:e0:1c:ee:45:0b:b2:bb:03:d5:
be:1b:24:ee:4e:b2:db:fa:39:5a:54:7a:2b:28:55:
ec:57:3e:42:72:f3:3a:b5:b9:22:78:a7:f2:05:9d:
d0:8d:46:b4:f9:fc:8f:38:ce:93:23:b9:1d:b9:a1:
d1:de:37:8d:40:2a:0d:7d:b6:53:4a:ad:bf:e1:a5:
6b:d4:38:d9:41:70:ca:3e:03:2d:bb:71:51:58:79:
15:85:b7:69:d3:15:5e:78:6b:5b:15:6f:01:fc:38:
a8:2e:b0:42:48:c1:06:9a:37:01:20:d1:e6:e5:50:
ba:98:a0:b1:91:13:50:fc:15:c0:3a:a9:ef:2a:b6:
d2:b1:fa:e6:88:15:9a:f6:54:1f:6f:1c:61:08:71:
74:0f:d0:cf:8d:e5:9d:55:85:17:fd:9b:62:6d:b6:
4e:3e:16:78:33:a5:e4:36:3b:61:b7:62:9b:35:89:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:D7:B7:21:8C:D3:E9:4D:57:4A:A3:E4:E1:B5:FB:64:3B:CA:07
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2b:94:81:7b:96:ef:d2:5a:95:4f:65:66:c2:55:14:99:33:
15:c3:4d:35:05:ef:a5:3d:42:5b:13:d6:46:86:b9:ba:54:6f:
ac:3b:af:3b:cd:f6:2e:c2:45:91:ab:f5:ad:33:48:30:e7:8d:
b4:9b:b4:4e:ea:8d:f3:a4:07:c9:48:51:77:c6:6e:01:2e:17:
f1:80:2b:71:b2:7d:5c:16:4d:8b:2a:7d:3b:59:85:e2:df:bb:
2b:56:1b:4c:42:38:9d:72:b2:e4:27:65:79:df:59:b8:f0:a7:
09:3b:85:7c:90:c3:b0:2f:0f:d6:63:ed:6a:c6:20:39:20:14:
de:95:4d:09:e0:7c:95:36:47:12:67:64:dd:89:64:df:27:01:
ce:f7:27:eb:29:98:d8:87:81:33:43:a0:d7:47:1b:6e:40:23:
81:9b:42:24:40:e3:35:5c:f2:47:b3:77:fc:15:22:fc:4b:9f:
1a:ca:79:89:90:c7:f0:5d:a1:09:6f:10:42:a1:32:aa:b7:8b:
d9:1b:3d:bd:ba:5c:a2:64:d2:90:bf:e2:eb:80:b7:dc:68:fe:
36:12:e9:5e:03:f0:0e:43:b3:4b:b3:5e:01:36:90:57:78:9a:
af:6b:71:28:ea:24:e9:13:9a:76:a0:79:09:0a:9b:e2:c9:1d:
19:fe:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:25:06 2025 by rpki-client