Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: ZZ+Adcz8RnZJlEOHv9fS/B6XKwJ+30J8cwbq45dGGV4=
Subject key identifier: F1:92:CE:42:A6:AC:71:97:F8:10:F2:83:4A:A2:C4:5A:BA:10:8F:0E
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 0198895758214556C97F349E8330DCF474B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 11:00:59 +0000
Manifest this update: Fri 08 Aug 2025 11:00:59 +0000
Manifest next update: Sat 09 Aug 2025 11:00:59 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: upPg/gt2IjrmXVA8RsYF751qUwt3CjzuNyxEwRYdnt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:58:21:45:56:c9:7f:34:9e:83:30:dc:f4:74:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Aug 8 11:00:59 2025 GMT
Not After : Aug 9 11:00:59 2025 GMT
Subject: CN=f192ce42a6ac7197f810f2834aa2c45aba108f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:e0:9f:df:3b:1e:58:8d:13:c6:6f:48:5f:
68:58:c3:7f:3c:da:41:81:d2:72:d5:cc:4f:f8:11:
cc:64:5f:7c:86:46:83:b5:36:fa:5c:bd:5d:d9:02:
a1:d6:6d:83:2e:8e:9a:aa:48:e2:23:18:f1:9b:fd:
69:50:74:2b:ea:cf:93:4f:50:ec:8e:d8:7c:bf:4c:
21:16:86:28:78:a4:29:a1:28:75:52:9a:4f:94:66:
6c:c1:72:7e:91:e4:a2:8d:f6:1c:99:46:6a:74:89:
01:68:55:71:ed:a8:e9:ae:c8:75:1d:5f:b4:da:cb:
e5:47:32:e5:e0:9c:d9:7d:cb:2b:94:57:bd:0f:05:
89:10:17:3f:68:53:50:07:f3:99:20:95:fc:84:42:
a9:ab:74:55:ef:d0:ce:a2:d4:12:4f:74:49:c5:9d:
e1:54:87:3b:4d:9d:17:9e:ae:d6:ee:bb:89:b5:4e:
c2:fe:f2:56:9b:9d:f4:37:69:8b:83:c6:11:ec:2f:
cd:07:fe:17:7f:87:65:75:dc:99:ed:22:24:04:28:
8b:38:94:eb:8b:fa:7a:d2:49:ac:32:b8:17:20:5b:
e8:04:90:dd:74:2b:e5:c5:5e:37:e6:96:1c:7c:44:
f0:de:0a:dc:8d:6a:f3:11:2d:22:19:80:3c:cb:64:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:CE:42:A6:AC:71:97:F8:10:F2:83:4A:A2:C4:5A:BA:10:8F:0E
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:e0:66:d1:1e:9d:fb:f1:4a:fc:e7:cd:02:6b:67:5f:02:
37:18:03:4b:00:88:7e:1f:6f:b7:96:8a:1d:70:f5:0a:e4:f1:
5d:6e:2b:fe:12:8d:cc:e8:eb:c0:7b:12:57:63:22:a0:19:32:
e3:45:4d:eb:ee:1e:14:3b:3d:16:00:82:3e:e4:8b:cc:a3:62:
83:0f:26:eb:bc:5f:c3:b0:44:87:e2:f8:c6:13:9a:38:b3:6b:
b0:55:33:30:69:11:cf:74:2e:02:4a:64:b0:65:2e:17:30:a6:
57:17:2f:0f:e2:90:c9:1c:72:7e:3a:1b:3a:be:5d:74:ec:4c:
0a:74:5a:21:7a:35:e7:14:10:e9:65:3a:19:b1:24:e4:f5:63:
f5:8b:46:17:9c:07:3b:ac:72:de:89:72:ed:54:98:75:91:b1:
1e:9e:77:39:67:f4:6c:40:9b:fe:c9:bf:56:c4:a9:e7:c1:b6:
bb:f6:e5:2b:aa:ca:1e:df:24:c0:16:a9:be:3a:d5:40:9b:32:
e2:5e:07:28:56:d4:58:19:91:34:97:40:a0:e0:a6:85:a0:42:
ce:e2:60:3b:81:a3:9e:1a:bd:21:c9:e0:d6:e6:49:86:8f:d3:
70:8a:76:59:c1:20:b2:51:76:1f:85:da:4b:d1:70:30:cb:54:
19:de:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:32 2025 by rpki-client