Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: HoQVoWQuz8b4LFsXFAq6yjFwJiPr29YP/JhdK/FV8Ss=
Subject key identifier: 33:FE:AF:4A:EC:8F:13:6C:85:E5:7F:21:89:92:FF:AD:B0:2E:97:02
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 019879AF356B39AD6FC8B0CFDC804AA275EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0311
Signing time: Tue 05 Aug 2025 10:03:02 +0000
Manifest this update: Tue 05 Aug 2025 10:03:02 +0000
Manifest next update: Wed 06 Aug 2025 10:03:02 +0000
Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=)
2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: C2on7mKMJ2vWz8sqRr5CYba8pUWZoBBQJcYNzjsSxwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:35:6b:39:ad:6f:c8:b0:cf:dc:80:4a:a2:75:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Aug 5 10:03:02 2025 GMT
Not After : Aug 6 10:03:02 2025 GMT
Subject: CN=33feaf4aec8f136c85e57f218992ffadb02e9702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:53:5a:90:e5:3f:18:15:b3:21:3d:a9:90:
ea:0b:2a:16:e1:59:31:1e:f5:17:56:8f:1f:a4:a5:
48:15:75:75:2c:4b:f0:74:dc:9e:98:f0:dc:dd:04:
16:be:87:6d:ef:05:79:b8:70:1f:7b:2e:91:e4:dd:
f8:f1:26:c6:53:e5:26:66:31:ba:b8:0a:ef:31:ea:
0a:65:4a:20:f9:8a:e5:f4:e1:9a:74:d0:2e:99:94:
f5:bd:53:10:48:03:df:a2:e4:b0:17:5b:b4:67:d6:
a2:27:7d:45:48:4f:e7:84:2c:c9:26:36:3b:b2:1f:
0b:b2:ef:7c:a2:60:7a:e0:70:8b:36:f4:6e:6d:40:
fe:bb:a8:f8:51:75:19:fc:89:d8:0a:e0:09:1a:b0:
13:e9:c5:64:30:8c:8a:d8:c5:51:6d:17:e0:81:65:
01:df:2a:f0:29:bd:6c:26:e1:4b:6e:1c:11:6e:13:
46:0e:8e:bc:56:bd:79:76:93:48:07:fd:f0:72:6e:
4d:d3:d0:aa:76:a1:1e:fd:e6:5c:ea:fb:93:17:61:
07:02:f1:07:29:70:b7:b0:3f:d1:55:6a:08:e7:58:
83:c7:89:21:fb:0d:9c:7d:47:de:92:c8:86:3b:15:
45:63:4f:28:1c:69:73:95:c4:f7:d4:59:8e:a3:51:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:AF:4A:EC:8F:13:6C:85:E5:7F:21:89:92:FF:AD:B0:2E:97:02
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:bb:32:82:03:49:99:2a:f0:b6:95:35:82:81:cb:bd:40:
61:b9:1e:86:07:1d:7e:a0:58:a6:70:35:b0:a3:57:6d:51:7c:
8e:93:6e:f9:a6:52:18:03:43:ef:f2:70:84:4d:2f:5e:8f:f4:
93:ad:03:de:9c:0f:aa:75:26:fe:ea:98:7f:4b:34:60:80:71:
1b:01:e2:e1:e1:af:57:8e:49:d9:28:5a:53:19:00:6a:61:17:
4a:a9:2b:43:20:85:b2:d9:93:5f:1c:97:cc:ce:f4:cd:df:b6:
8b:05:14:d5:bc:2e:ac:43:c6:1d:bc:e4:f3:ac:84:58:81:62:
c9:29:92:ca:e7:f5:36:f0:99:9d:8d:a1:69:d5:a6:f6:ac:75:
eb:f4:5f:be:a4:1a:5b:b1:8c:e2:e8:59:80:0a:5b:2c:da:7b:
6e:59:07:02:1f:57:bd:a5:f9:59:d4:71:4c:a5:0c:b2:c8:8a:
4a:cb:fa:8e:dc:c0:06:59:bb:24:b9:73:9d:49:01:36:b2:f9:
26:0d:35:67:06:8f:23:33:ff:33:c5:10:f9:d3:3b:93:70:41:
30:26:86:a3:15:b2:1d:91:98:61:61:58:da:c9:d1:54:93:f4:
09:9e:ac:93:da:ac:cb:99:d6:7a:4a:b5:95:41:7a:74:56:f7:
12:7e:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:16 2025 by rpki-client