Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: D8riITc90PMGB6QomhL8sAkMOpxMb/BSgGS+0DQr1pA=
Subject key identifier: 89:1D:CD:4F:92:B3:D4:93:47:B6:8D:7E:3B:0F:61:B6:F1:F0:26:19
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 0198827992667082234564EC27C9922E1214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0E92
Signing time: Thu 07 Aug 2025 03:01:01 +0000
Manifest this update: Thu 07 Aug 2025 03:01:01 +0000
Manifest next update: Fri 08 Aug 2025 03:01:01 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: WD3r6ccN3r1MwElcbgqk1QBhF0hY9cpwfVoOL+c4zTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:92:66:70:82:23:45:64:ec:27:c9:92:2e:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Aug 7 03:01:01 2025 GMT
Not After : Aug 8 03:01:01 2025 GMT
Subject: CN=891dcd4f92b3d49347b68d7e3b0f61b6f1f02619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:1d:5e:fc:e8:01:24:12:ee:b1:55:de:1a:
5f:e3:0c:67:a4:8e:e8:e3:b4:50:8e:8e:e6:ab:53:
97:0a:c3:fd:b8:b6:c3:ac:c6:a3:69:4e:ae:ba:ff:
52:94:04:b0:cb:70:15:5c:06:ce:18:f7:2a:49:0a:
c6:e2:31:fb:00:1a:4e:19:24:f8:73:7a:af:ff:91:
65:1a:73:92:e3:8c:99:0d:b7:6e:bc:fd:d9:54:9a:
36:db:cb:5e:42:0b:68:ed:48:29:31:45:e8:59:4b:
8f:b1:dd:c0:d1:6b:e8:f8:e9:40:ff:29:98:8c:44:
f0:34:09:21:d7:03:1d:c5:22:30:80:40:ca:d2:82:
f2:a6:43:3e:bf:dc:b5:6e:b4:87:e6:02:08:47:c1:
1e:19:e3:61:27:64:b0:da:2e:58:64:f0:b6:07:54:
19:14:c9:b8:e9:69:2f:69:b9:83:5a:34:b8:c4:14:
44:d3:b4:29:8f:e0:8c:09:97:cb:4e:2a:1a:3a:5c:
ec:a2:98:c7:6b:9a:4f:61:0d:b4:59:55:95:dc:21:
7f:55:a3:8f:de:e6:6c:ff:6d:f7:ee:92:aa:d9:0b:
e9:17:1f:e1:22:aa:72:72:30:3f:9e:5e:ae:16:e5:
28:ce:e3:4b:98:d2:83:36:11:03:bd:60:63:71:09:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:CD:4F:92:B3:D4:93:47:B6:8D:7E:3B:0F:61:B6:F1:F0:26:19
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2a:ec:2a:0f:52:c0:31:27:82:29:5c:46:d7:fa:43:2a:7c:
2d:52:10:dc:07:22:a9:21:15:c5:b2:e3:02:9e:66:6e:f8:7b:
8f:2a:8c:00:0a:a4:59:ff:b6:01:26:08:04:d0:00:67:c1:3a:
60:f9:cc:57:5c:a5:ca:ab:72:54:35:5c:49:b5:08:ad:77:99:
ad:af:2e:7f:98:5d:f1:b5:8d:a6:1e:fa:b5:40:6f:74:55:8e:
58:89:fc:13:29:f3:21:5e:a6:e7:92:13:32:ac:0e:e6:6b:d3:
d1:6c:5b:a5:7c:e9:a4:11:d6:bd:a8:0c:59:39:5d:19:35:99:
13:8c:ca:0b:ad:2b:e4:9f:fd:bb:00:9d:d7:e3:7d:f7:ab:64:
12:12:9f:7f:45:c3:c6:42:fa:ea:e6:69:d5:3b:fd:0e:6d:18:
10:c5:38:87:d3:ef:16:a2:30:d8:e7:a3:33:6e:b0:ba:06:d0:
43:9d:22:db:6b:6a:11:f0:92:92:2b:fa:0b:e2:f5:f9:23:66:
f3:eb:b4:34:2b:16:70:2a:f1:91:9d:39:59:f2:8b:e2:36:28:
c2:35:da:88:43:85:06:c6:b1:c4:74:53:0c:1e:ae:75:68:a6:
80:88:c2:3b:ea:1b:02:c4:64:87:55:64:90:cc:af:cf:3c:75:
8c:af:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:31:43 2025 by rpki-client