Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File: jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier: Pr7ZjxqDQdzNW5HbfLDFNYhci9kbptq2H5xe4jMW9ro=
Subject key identifier: CC:18:77:F6:94:12:80:CB:AB:9E:81:20:4C:2F:C5:C2:21:20:57:5D
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 01987C7727C31DEA6F27B1BA1C17D39D4719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number: 06CA
Signing time: Tue 05 Aug 2025 23:00:40 +0000
Manifest this update: Tue 05 Aug 2025 23:00:40 +0000
Manifest next update: Wed 06 Aug 2025 23:00:40 +0000
Files and hashes: 1: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: kprkgZId27EOiiG2YPaRRrJQy6t7aB0T5tYv87cW7rs=)
2: wBXvBP-sIHkTwmZUmnZjwsOY0so.roa (hash: sf9c/AK0uTzIyNN2fC+2QGD8WVkysi/YAMOyb/8pxmk=)
3: wLZVru27R5hLrY-IBfRtSt_tUx8.roa (hash: 76J4QSugwyDTtKGwWKRlLvHMLnsw0aj0+Qke60PpJqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:27:c3:1d:ea:6f:27:b1:ba:1c:17:d3:9d:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Aug 5 23:00:40 2025 GMT
Not After : Aug 6 23:00:40 2025 GMT
Subject: CN=cc1877f6941280cbab9e81204c2fc5c22120575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:87:91:ac:ed:25:22:fc:16:04:f8:2f:1e:
d7:41:f0:49:2f:b7:a1:c6:bf:87:d9:fd:d9:d3:22:
fe:38:ac:ab:15:06:e6:7f:8c:3b:03:ed:a8:74:81:
02:bb:2d:13:ef:b2:10:ed:64:e5:90:91:fa:d1:a9:
a0:aa:68:ae:91:24:a5:65:34:fd:10:57:47:94:96:
c8:ad:d5:10:cd:51:eb:57:fc:1f:32:ca:17:a9:89:
ac:db:ae:90:91:de:e5:99:d6:ef:b7:45:95:6c:d2:
30:5c:20:56:f5:cd:95:87:34:8d:f5:30:b8:ba:89:
5c:1d:bd:49:cd:79:b1:25:68:d8:ba:5f:9b:9d:25:
29:eb:58:e4:62:5f:10:b8:fe:88:4b:ab:d4:e3:99:
00:a4:8d:86:d9:02:2f:ba:25:6c:8b:c8:97:20:43:
42:6c:c5:38:73:86:19:69:6d:a0:83:87:91:bb:39:
fa:0a:24:97:68:05:a3:22:29:62:f0:d0:06:2d:10:
41:35:22:c7:47:54:40:66:b0:d5:83:ea:84:a6:3e:
d3:3d:47:b0:5a:2f:89:df:94:f8:a5:90:25:b4:85:
92:13:5a:f7:b0:20:a9:dd:f5:06:8b:79:bc:93:5a:
c2:cb:84:f7:93:5e:7c:1d:ae:02:d9:9f:04:a8:ff:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:77:F6:94:12:80:CB:AB:9E:81:20:4C:2F:C5:C2:21:20:57:5D
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:d3:4f:03:36:12:06:22:8c:95:75:55:04:e9:6c:eb:5f:
db:2e:a8:33:9d:4b:4c:09:a0:14:8a:a1:da:44:a9:8d:1b:a2:
43:e6:b4:63:21:eb:c6:0d:44:0d:8d:2b:09:29:3f:f4:f7:00:
15:ba:a6:69:b1:ce:aa:9f:3e:71:f6:7c:a4:0e:44:c8:45:9f:
61:1f:34:4a:5c:0c:8e:34:d3:b5:44:4b:67:4e:2a:76:85:40:
65:20:78:f3:b1:52:94:b7:af:2f:cc:27:34:2b:81:1d:92:fb:
36:02:c8:33:d3:ee:7f:71:25:25:c4:9c:24:e4:c1:0c:7b:1b:
03:a9:74:2d:94:5b:9a:8d:6b:b6:e8:af:91:87:e7:4b:2b:6a:
b3:e5:7f:c6:72:5d:fb:d8:5a:61:36:7b:f2:de:1f:21:aa:bf:
e2:a0:fa:4c:17:2a:85:e6:13:b8:14:1e:f6:5b:42:a2:03:7f:
18:d9:ab:3c:20:35:24:1a:1b:9d:e3:81:92:da:eb:bf:14:27:
67:eb:fd:f4:ff:9e:05:66:9f:ee:e8:40:ef:15:a2:de:e6:b2:
ef:38:0e:93:f9:c4:fc:64:df:23:e2:17:69:33:31:18:89:54:
10:0d:4b:77:c9:72:25:cc:cb:ef:9d:bf:e4:7a:e1:2e:29:54:
92:f4:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:19 2025 by rpki-client