Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: /OBXNxRVCIor536Qych+E/2mLy9wPUbMeymW0nUqwno=
Subject key identifier: D6:6E:86:CC:79:4B:AB:E6:EF:BE:2E:B5:2F:06:65:D0:21:F9:65:C8
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 019873E1DA1977932B2D822094452A3DB462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 0F68
Signing time: Mon 04 Aug 2025 07:00:37 +0000
Manifest this update: Mon 04 Aug 2025 07:00:37 +0000
Manifest next update: Tue 05 Aug 2025 07:00:37 +0000
Files and hashes: 1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: /Z9bD9NnA7xnmZhuORgFoNEwJfBMYQSvbjQ5n6Gk3pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:da:19:77:93:2b:2d:82:20:94:45:2a:3d:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Aug 4 07:00:37 2025 GMT
Not After : Aug 5 07:00:37 2025 GMT
Subject: CN=d66e86cc794babe6efbe2eb52f0665d021f965c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:fa:8d:60:cb:19:f0:02:98:72:fc:a2:66:
e7:b4:70:7e:3a:5e:c2:72:4e:65:4c:28:68:d7:ed:
0f:71:64:75:bf:9c:3b:88:01:2f:41:c3:e0:c7:66:
84:fb:15:06:ea:58:d2:0f:90:d5:ec:f2:85:78:2c:
31:90:cb:19:97:30:88:cd:eb:7c:37:80:9f:5f:5e:
f8:a3:b0:fd:be:d9:fd:a5:83:e6:7d:f0:74:a2:76:
a4:95:f7:54:23:35:f1:f5:e0:1f:28:94:88:40:2f:
02:04:6b:b3:3f:ea:eb:6f:0f:6d:04:7e:a1:6a:03:
6c:12:43:95:0d:36:da:54:09:81:6d:a5:02:a6:5d:
7c:47:28:fd:16:72:44:5b:91:37:16:f1:bc:f7:41:
e0:ea:7a:39:92:15:b0:10:40:18:68:79:db:a1:70:
6e:c1:94:3a:c7:84:b8:42:75:70:fb:af:b8:7d:ae:
2e:f8:40:23:49:9d:e2:c7:50:86:a3:75:f7:e2:f2:
9a:6f:77:b8:e8:ae:73:67:b2:33:3f:47:e9:b3:77:
42:f5:14:7f:8c:85:83:f2:9c:16:93:aa:09:cf:ab:
9d:24:8a:e6:df:34:5a:64:95:4a:30:f8:82:42:bc:
d1:a3:29:83:70:da:a6:81:c6:48:e8:75:65:96:37:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:86:CC:79:4B:AB:E6:EF:BE:2E:B5:2F:06:65:D0:21:F9:65:C8
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cc:94:64:34:6b:ad:9d:b4:c7:67:1c:4d:d8:c1:3f:92:34:
96:0e:f8:46:11:93:44:02:f2:49:16:d9:cf:c9:2e:ca:65:b3:
65:ce:20:a2:c6:1e:5d:8f:64:c3:d3:6e:1c:f4:db:e5:24:ad:
e1:e9:9d:d0:78:46:c6:06:ea:00:8c:f6:ce:ad:c0:80:67:ba:
95:1c:4a:8a:45:d4:d4:12:0f:cd:ca:dd:03:3d:9b:5c:e4:46:
b8:cd:68:38:b4:2e:de:88:37:fe:ce:ae:da:bb:c6:6b:0b:68:
41:f6:be:56:b9:c3:4e:d6:69:dc:4a:5f:d5:47:b4:20:35:3b:
c6:61:79:b2:68:ab:2e:97:ed:30:75:02:f3:fe:2c:2e:26:db:
a6:76:36:5e:d2:38:3f:b1:c5:a3:c8:07:78:14:11:d5:16:7c:
b7:df:bd:1f:6e:17:bc:77:14:0d:dd:03:df:3d:fc:32:8d:eb:
8c:0a:f4:9b:cc:54:ec:bf:11:55:aa:61:4d:aa:12:d8:80:0d:
97:c9:cc:8c:8c:95:fc:02:62:7e:e1:01:ce:ac:7c:14:7d:ae:
4c:dc:a9:c2:77:39:07:bf:02:06:83:c2:64:2b:4b:31:eb:ae:
a5:fe:10:2c:91:46:7d:e4:d9:8f:dd:99:5e:b7:da:8e:1d:d0:
47:60:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:18 2025 by rpki-client