Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: AobK5RH4IrHNxuZL3ER3CwH21zohMTi9BlN3Ft5Tt/U=
Subject key identifier: 77:EF:33:4B:AA:9C:35:CA:9F:DC:41:0E:59:AE:55:C3:0B:F6:13:7C
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 01988EB4272EB718DBC9E7A5F4A07C9623A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 14F1
Signing time: Sat 09 Aug 2025 12:00:27 +0000
Manifest this update: Sat 09 Aug 2025 12:00:27 +0000
Manifest next update: Sun 10 Aug 2025 12:00:27 +0000
Files and hashes: 1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
2: RQvFwPyBVAELy1TU_YFm3UJenmE.roa (hash: LzZxpUC6I1GH1bpp8UofG4oZYb3QFGgu/BwVtxYx/Xk=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: YrkSwtZZ6uIS7yEORzergQTHoF6IUXbkbhjeGHN0vPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:b4:27:2e:b7:18:db:c9:e7:a5:f4:a0:7c:96:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Aug 9 12:00:27 2025 GMT
Not After : Aug 10 12:00:27 2025 GMT
Subject: CN=77ef334baa9c35ca9fdc410e59ae55c30bf6137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:b8:80:9e:cd:05:67:6d:29:37:4f:bc:11:
a4:e9:e8:c4:63:e5:3f:9d:d5:ce:c5:36:b2:0e:73:
6b:70:29:1b:5c:8f:c1:3c:f0:b4:8f:2e:da:91:06:
24:b0:f0:6e:c1:77:b2:32:be:46:f1:cd:73:a1:ae:
f2:2e:93:91:96:b6:e1:f0:e4:16:2b:2e:ef:ba:b5:
7a:46:3f:e1:36:8d:b7:27:b7:23:f6:aa:b0:bd:38:
9a:fe:08:5c:2b:5b:87:e1:74:64:c9:3d:8f:9a:e1:
ec:62:9c:28:65:76:dc:91:3b:6c:e3:3c:9d:91:99:
ce:55:4d:18:7d:d8:e8:68:43:4b:6c:1c:e3:d6:fc:
24:bc:3f:95:8e:36:4d:e6:b7:4e:3a:42:04:cc:ac:
6d:3d:d2:ff:42:80:af:b1:21:fe:ae:33:39:99:5d:
29:66:43:ef:6e:da:7c:a0:71:a5:da:04:c5:cf:81:
d7:47:d9:e6:ed:c1:9b:a7:08:64:00:a9:7d:33:de:
f2:85:df:a7:e6:6c:a1:be:b6:08:53:bd:f7:b2:fd:
a7:5e:b2:84:86:ca:68:17:44:45:95:1b:2d:d0:ca:
86:07:10:d4:da:44:9e:59:09:86:d7:8c:fe:5d:48:
fc:9a:39:cb:1a:54:28:81:87:d9:d5:c9:97:92:35:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EF:33:4B:AA:9C:35:CA:9F:DC:41:0E:59:AE:55:C3:0B:F6:13:7C
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6b:67:d4:ad:59:e2:ab:f8:c0:b4:cc:88:3c:83:ba:d8:84:
f8:87:1d:75:26:9c:55:d6:9a:3f:ef:08:7c:43:bc:c8:3c:eb:
c3:57:8d:66:85:db:6a:7e:ad:76:cd:8d:1f:06:5f:93:e5:df:
b1:8f:3d:73:3f:d4:23:9a:21:a8:fd:4d:5c:fc:9e:5c:31:91:
f9:0b:7c:e7:97:3a:66:da:b9:57:4b:1d:44:b8:07:ce:4d:e4:
7b:a2:94:75:1a:ab:d4:67:e3:3c:78:41:d1:2a:75:da:7e:0a:
55:ae:b3:a9:c6:dd:54:30:99:99:8f:36:51:92:9d:f9:0f:4f:
bf:5a:6d:53:d1:d5:76:6c:33:4b:d0:1f:a6:ef:64:11:8d:3e:
61:61:2c:e8:18:cb:57:9b:8b:b3:4e:44:c8:2e:57:16:bc:d6:
29:78:86:82:03:15:9e:79:bf:12:52:96:4a:68:b4:b1:30:8c:
97:2f:2a:8e:d7:6a:66:12:7e:3a:d8:27:70:88:ff:a3:6e:96:
9d:c3:c9:6b:e7:79:b3:75:ea:d2:15:1f:12:f9:a7:a4:ac:e2:
e7:78:73:85:fc:b7:b8:44:ab:a1:ad:d8:11:0b:aa:dd:99:df:
65:ac:9b:31:f2:85:76:30:ab:24:19:57:40:d2:96:6b:9a:fa:
42:d9:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:45 2025 by rpki-client