Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier: 4TaNiPm2fG1CorCJw3/WoAEY47pJdzmTiBG8MPpvObo=
Subject key identifier: 0A:23:A0:A4:5E:EB:7A:D4:57:83:FD:29:60:86:9E:C2:F0:7B:01:B1
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 01987C09F7215DEFA69104397DE9E7FF7C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number: 085B
Signing time: Tue 05 Aug 2025 21:01:24 +0000
Manifest this update: Tue 05 Aug 2025 21:01:24 +0000
Manifest next update: Wed 06 Aug 2025 21:01:24 +0000
Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: gu4FsOYr8SCflRXaiPItbVAitYghmsvKJ9T+PpE6Jpw=)
2: ZFYqKvxguHm4smQvy9awnquW2qU.roa (hash: 8vWdx+ga/HPoDaDg67DCWpBBfssC0K3uCo1oOh4juXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:f7:21:5d:ef:a6:91:04:39:7d:e9:e7:ff:7c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Aug 5 21:01:24 2025 GMT
Not After : Aug 6 21:01:24 2025 GMT
Subject: CN=0a23a0a45eeb7ad45783fd2960869ec2f07b01b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:b9:c9:68:f1:b1:1c:45:ca:2b:db:9a:59:
49:91:ec:20:1f:3e:30:1a:6b:a7:04:c7:60:58:a5:
7a:28:b9:95:2b:ea:eb:04:00:95:90:68:16:3a:85:
bc:c6:4e:6b:79:18:bc:94:e7:c1:ba:f4:71:d0:3f:
46:df:cb:f6:bf:8e:30:2f:16:ec:df:37:55:46:23:
30:37:4e:69:d5:73:06:3f:b1:06:e3:9c:53:d2:56:
80:aa:36:f0:e1:26:d6:fb:c2:a4:44:84:69:c2:a5:
0f:25:cf:ac:95:c6:82:99:7c:80:3f:5e:e1:00:6f:
56:37:79:15:3d:a6:13:fe:1f:cf:f4:ac:52:12:1d:
82:7a:67:66:e0:c3:1d:4c:b3:e4:3c:e3:61:62:ab:
b5:82:a9:fd:59:d3:12:9b:a9:b1:e5:35:20:0c:c6:
5e:3b:a6:73:74:c1:84:d0:d0:2e:6d:60:b8:04:31:
2e:c1:b6:da:4b:98:4b:e9:df:0f:43:8a:02:01:a5:
24:17:99:59:cc:93:14:fb:b4:8e:73:a9:c1:bc:2c:
33:9f:a3:59:33:93:af:5f:ff:6b:36:f3:ce:76:60:
c6:81:9f:6d:f4:5a:c4:a5:fc:b0:dd:07:17:13:23:
e7:4f:97:f8:95:89:d7:37:8a:ac:f7:f6:62:9f:ab:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:23:A0:A4:5E:EB:7A:D4:57:83:FD:29:60:86:9E:C2:F0:7B:01:B1
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:07:5c:aa:c6:8e:3d:b2:f7:64:90:99:d5:45:67:5f:9a:
e1:ad:bf:50:08:9c:43:25:d1:9b:a9:96:d7:40:ae:68:fe:ad:
72:db:5b:62:35:cb:6a:e3:89:e2:38:e7:8a:4d:a6:a0:4c:cc:
97:1f:07:62:d0:a2:4d:9f:3c:16:1b:af:65:2b:17:b3:6c:3e:
53:e7:5e:aa:b3:20:23:fe:ae:67:18:24:37:a5:99:bf:b4:5c:
50:cb:8d:29:33:8d:99:94:7a:0f:11:c1:e8:33:c0:f1:4d:52:
24:c4:66:de:44:d4:90:63:c1:85:17:95:e8:16:e0:f3:96:19:
aa:41:0f:ed:2a:13:9e:d2:57:2a:fb:d7:b2:f3:7a:0b:2a:a7:
0d:45:52:56:b0:df:68:5c:4e:da:c7:6b:07:b9:b2:44:94:de:
3a:3c:61:3b:66:60:3a:fd:82:f9:f9:02:1d:4e:0c:fa:cd:ea:
72:32:c5:ef:01:97:4e:af:e4:b1:45:07:8f:9f:d5:ed:ad:e9:
80:cb:fb:b9:30:21:ad:95:33:a0:c9:30:f2:59:57:49:b6:08:
21:ec:21:f2:a1:48:be:9c:2c:96:8b:82:48:55:36:ba:1b:db:
b5:7b:ce:a7:07:25:47:48:cd:59:28:0a:11:8d:22:83:ba:64:
9e:d1:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:54 2025 by rpki-client