Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: SX12OMvMh28q8GCUkJKpEZ0Kv8Ewb6bbvZEH2IfEc/E=
Subject key identifier: 68:ED:22:32:9F:24:76:29:FB:60:FB:67:FB:E7:77:07:95:A1:3B:43
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 01987DC148E1C2E8D9E49B700C51FB987C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 03CC
Signing time: Wed 06 Aug 2025 05:01:15 +0000
Manifest this update: Wed 06 Aug 2025 05:01:15 +0000
Manifest next update: Thu 07 Aug 2025 05:01:15 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: b44dXV2cK9tswtOrBdVSdQhxpvhC5CFlq9snMZmwYHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:48:e1:c2:e8:d9:e4:9b:70:0c:51:fb:98:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Aug 6 05:01:15 2025 GMT
Not After : Aug 7 05:01:15 2025 GMT
Subject: CN=68ed22329f247629fb60fb67fbe7770795a13b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:07:c5:a3:1a:54:f3:b0:b7:b6:0d:9d:49:
5e:5b:f5:aa:7e:98:0c:b5:f6:6c:dd:ae:51:b2:f3:
d6:92:b2:9b:c8:c6:2e:9e:15:a1:67:24:ba:29:bb:
7e:c2:18:c6:21:79:fa:e3:0d:cd:0c:df:98:97:3d:
d4:a9:f3:ec:58:61:2c:c2:bf:f7:64:b1:2f:1d:ae:
27:1c:48:74:69:79:9d:0b:32:23:fa:3f:9f:91:a8:
02:f0:7c:49:57:4c:0e:29:a1:d6:a6:be:c8:e9:6b:
e5:85:4e:a6:c8:5f:26:ee:49:00:f8:d5:05:28:ad:
e6:f7:49:d8:4c:10:ad:4d:1d:a0:57:bc:e7:0c:0e:
01:23:51:cd:e1:ff:e0:f5:2b:b2:a4:90:d8:26:f4:
aa:50:c1:4b:c5:30:88:b0:88:ae:5d:b9:52:a6:30:
4e:6f:39:9e:8d:fd:95:5d:eb:3a:dd:bf:af:53:ed:
db:09:1b:a2:66:16:24:3d:c9:58:a3:a0:0e:4c:c2:
f2:57:eb:03:af:dc:06:81:1e:dc:c5:db:9e:db:11:
6e:3e:38:ce:59:7b:02:c3:5e:ea:a6:f6:bc:1c:c4:
f8:80:e4:d3:3d:cd:70:e6:0c:b9:5d:15:05:cf:6a:
c8:ec:66:f6:3e:62:d9:3d:f1:0d:f9:45:77:b7:45:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:22:32:9F:24:76:29:FB:60:FB:67:FB:E7:77:07:95:A1:3B:43
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:19:f0:6a:88:4e:cc:09:52:b7:d9:cd:be:86:52:a4:09:
51:5e:ea:57:1c:0d:11:e8:fa:3e:57:ee:fe:0a:28:fb:b4:b4:
1b:00:53:dd:0f:9b:63:7a:28:72:18:c7:d3:62:35:ba:79:3d:
d8:c6:64:1a:fc:01:40:cf:76:4e:3f:d4:35:d2:72:56:de:ce:
b0:8f:35:ea:32:80:3b:43:96:21:ea:e2:93:7a:1d:f2:2b:40:
b3:64:64:0f:d2:df:bb:e9:14:02:d8:25:43:e9:c3:ab:62:10:
68:54:9e:85:a6:1b:53:b3:b4:43:6b:91:b3:e9:9a:ed:38:44:
52:36:06:0f:3e:af:c9:c7:3a:9f:37:be:51:73:74:95:f8:3b:
65:fb:cc:66:c3:f2:b1:5b:06:19:45:42:71:c7:db:e4:1d:5b:
fe:11:1b:38:4e:5a:85:6e:07:3b:cc:e8:38:47:77:b0:a4:a3:
a2:05:ac:0c:29:5d:46:d6:86:71:d0:54:67:32:55:91:47:04:
bb:74:32:aa:64:21:81:6f:fe:d7:4a:a0:68:e0:83:be:cc:44:
65:5d:07:b2:a5:57:f7:94:63:69:40:78:69:7a:bd:95:f7:35:
4d:79:4c:9d:4c:c0:d6:6c:2c:f2:5b:f4:67:28:87:db:4a:dc:
c2:55:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:46 2025 by rpki-client