Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: 1XLPomtpmUDZSr0inm4YDlbrKFOn+4AnSwJ2iW7q6c0=
Subject key identifier: B0:2C:C1:32:71:7C:1C:D0:EF:E3:6A:31:A3:4E:71:F8:24:77:F1:51
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019883C36EC0DBD47FD9195D9B5CF92DC94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 09:01:19 +0000
Manifest this update: Thu 07 Aug 2025 09:01:19 +0000
Manifest next update: Fri 08 Aug 2025 09:01:19 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: H8hzTCq7NchFP45L66hs9tWu3fijjERet2IQlSU1ekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:6e:c0:db:d4:7f:d9:19:5d:9b:5c:f9:2d:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Aug 7 09:01:19 2025 GMT
Not After : Aug 8 09:01:19 2025 GMT
Subject: CN=b02cc132717c1cd0efe36a31a34e71f82477f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:30:9f:08:5f:93:88:72:d1:04:dd:b6:0b:
9d:4f:33:96:c6:2f:62:99:16:6b:26:ce:c5:41:e9:
be:72:67:ee:22:28:2d:71:a6:b6:2f:98:56:32:00:
ea:4d:10:e2:44:71:bd:a3:90:f7:c8:71:f3:e7:9a:
33:91:05:62:6b:7e:5c:27:3c:a4:3a:be:01:19:e0:
5e:7f:9b:2e:f5:e6:10:bd:0f:ba:af:78:be:5d:be:
32:14:1b:0a:26:91:4b:b1:a2:71:46:2a:8c:a9:4f:
69:c6:3b:c7:99:10:25:1a:ce:bb:c8:47:65:d8:58:
91:cc:30:4b:45:11:d0:c8:54:1d:e0:6b:8e:05:80:
19:63:ef:53:92:cb:47:25:e2:d0:6d:2e:8e:85:23:
ff:eb:58:04:a2:be:b0:6d:53:45:73:ee:c5:85:43:
67:33:c2:38:f1:be:d6:7d:5f:fe:bc:b2:26:ed:fc:
5f:72:be:b9:f4:76:aa:b9:de:0f:a1:47:9e:b2:59:
90:17:39:74:24:c4:e9:40:8b:bd:58:17:cb:4c:79:
f4:80:ef:f6:b9:7f:e7:0b:15:10:e9:1f:73:3f:ed:
28:e9:49:3c:31:ca:26:40:92:cf:28:d9:e6:fb:4f:
c7:73:40:13:a5:48:23:c5:13:9c:fe:c9:ef:7f:69:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:C1:32:71:7C:1C:D0:EF:E3:6A:31:A3:4E:71:F8:24:77:F1:51
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:71:2d:3e:55:7f:93:06:02:4f:8d:20:0f:8d:c4:7f:0e:23:
75:8b:20:61:9b:06:3d:cc:6e:19:35:2f:40:4d:f9:0c:f7:82:
60:ef:57:ac:b0:d5:a6:46:4f:6d:29:89:a5:a6:2f:fd:1d:92:
eb:9b:4a:f3:8b:11:d4:35:f1:4d:02:93:05:af:20:ce:5e:62:
69:c8:a8:8a:af:76:06:e2:6a:db:94:f8:96:34:48:15:73:cf:
6c:db:e0:73:35:0e:96:82:5d:38:8d:5e:ab:4c:43:a0:0f:03:
82:26:c5:77:00:f9:17:0b:94:5f:68:20:e1:61:42:2b:59:d0:
b2:c8:a2:29:63:ad:ac:76:86:93:c4:2e:94:4f:77:94:4a:71:
30:30:2a:d1:fa:54:bc:eb:07:9e:f2:84:b0:a0:c4:a8:97:af:
c2:a2:ba:cb:63:27:40:03:42:f5:25:f7:9a:9e:2a:28:18:71:
db:6b:69:14:30:80:ec:74:3a:de:5c:5e:41:c5:6d:2f:2e:6e:
b7:50:5d:f7:a8:54:f3:8f:4c:8d:e9:e5:92:bd:70:35:f0:19:
c6:2d:53:0a:9e:4a:bc:81:b9:01:cc:87:c4:88:80:a9:aa:e2:
52:0a:0f:d1:99:80:ee:39:27:c6:3f:d4:c0:39:71:49:e1:e6:
e1:9e:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:46 2025 by rpki-client