Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: recy6mFROM0SVoohOY63Q7xf6Fx9G1DUPuQyShN4Al4=
Subject key identifier: 85:83:A1:A7:63:94:8E:D2:04:DC:1D:36:75:51:94:70:DA:47:EF:BA
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 019873E1CFE5679D336406E90813B3E7059F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:35 +0000
Manifest this update: Mon 04 Aug 2025 07:00:35 +0000
Manifest next update: Tue 05 Aug 2025 07:00:35 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: Jm7ACs9ECR+95wlUwpb0gsZRx0zaL5OC0NLyHEJ1C2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:cf:e5:67:9d:33:64:06:e9:08:13:b3:e7:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Aug 4 07:00:35 2025 GMT
Not After : Aug 5 07:00:35 2025 GMT
Subject: CN=8583a1a763948ed204dc1d3675519470da47efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:26:62:cc:13:ed:3b:1a:79:2f:ea:5c:d0:
89:2f:d9:e1:b6:0c:49:62:aa:24:31:d2:49:91:de:
e8:7a:78:fb:ea:4a:3d:56:fd:72:e4:13:a9:73:f9:
87:e3:3b:1c:d7:6d:2b:e4:42:50:d5:b7:f2:df:aa:
72:6e:48:c1:1c:d3:a2:f2:cb:c6:d1:a3:e8:16:5e:
52:fa:36:a8:f3:5b:48:14:d9:0a:73:76:d6:76:7f:
4a:93:c9:90:a9:e9:14:f7:7c:bc:0b:9c:de:eb:06:
e7:77:86:02:4d:5f:06:4a:95:ca:17:c1:c8:ee:ab:
39:2e:21:33:00:d7:c1:4e:ab:66:5e:7f:3f:85:0b:
36:d6:de:97:8a:92:f2:30:ec:ba:de:82:56:fa:53:
d1:08:82:22:36:44:c0:10:ca:47:c2:75:a8:0b:97:
3c:d0:67:72:c8:ed:8b:45:3e:2e:80:f0:58:80:2d:
8d:08:02:11:a7:5d:8b:61:f8:70:15:3e:68:bb:ff:
a8:25:43:9d:0f:2e:30:de:e3:13:b2:30:ad:87:c5:
b2:3b:24:58:bc:b1:8a:10:0b:30:59:4c:d2:42:35:
52:9d:b8:5d:d7:7f:42:63:b7:95:f1:cf:7f:7c:e1:
42:50:22:d3:c3:3a:de:13:44:8b:36:bb:19:0e:fa:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:A1:A7:63:94:8E:D2:04:DC:1D:36:75:51:94:70:DA:47:EF:BA
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:72:7a:8d:f5:25:9c:8d:16:de:43:9e:df:9b:17:db:d3:
5f:72:cd:2e:07:e7:ff:a3:b7:d0:f2:35:a2:12:ca:e3:3e:d9:
59:4a:4c:d6:13:e7:02:c4:82:f5:a6:e9:cb:e8:76:8a:88:2a:
4a:8b:93:e6:7f:f9:c5:3a:b3:df:77:53:55:3d:b6:4f:00:46:
95:80:ea:5d:80:ee:bd:5c:c8:2e:be:43:72:db:ee:ef:1e:22:
82:c7:94:ba:61:9d:54:2d:bf:80:6a:7d:bc:51:e5:08:9b:2e:
2c:23:2f:21:be:c9:a6:bb:ca:ae:b9:87:d1:14:82:fc:a0:f2:
3f:6f:ce:7f:a0:02:b0:f9:af:36:bc:9d:cf:af:af:e5:2c:2e:
f0:e0:ce:5f:5d:54:d0:4d:6d:92:54:de:b7:56:6b:28:3c:ce:
15:cc:0e:d5:0a:8e:5c:a1:50:18:a1:4b:09:ba:13:2d:9a:b3:
56:61:45:b6:a2:f0:7e:bf:62:58:fe:77:fe:ef:ea:25:8c:f6:
81:a3:10:8b:ca:f7:14:99:3e:ca:c4:67:a0:d5:ec:1f:ab:f1:
d8:0f:cb:51:18:84:e6:f9:96:1a:86:7c:cb:9b:e4:6d:cf:86:
50:7d:50:49:8d:bd:fc:7c:e7:3f:a7:25:dd:3c:0c:e9:fc:a3:
21:f8:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:46 2025 by rpki-client