Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier: fqQp/2T5gTqMNxF5kpxCwwxaBbtBuIzBsJGEKbui+QA=
Subject key identifier: 70:12:57:F9:E7:52:BB:80:BB:15:6D:52:7F:10:B9:05:22:7E:A9:00
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial: 019875D039A7BD23C7BE6BFC81D74330EA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number: 10B7
Signing time: Mon 04 Aug 2025 16:00:37 +0000
Manifest this update: Mon 04 Aug 2025 16:00:37 +0000
Manifest next update: Tue 05 Aug 2025 16:00:37 +0000
Files and hashes: 1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: +NDt1yCVqUtuOsR1tPK1yyQ4tIWdgwWV7W4VRkPZ5TY=)
3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:39:a7:bd:23:c7:be:6b:fc:81:d7:43:30:ea:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
Validity
Not Before: Aug 4 16:00:37 2025 GMT
Not After : Aug 5 16:00:37 2025 GMT
Subject: CN=701257f9e752bb80bb156d527f10b905227ea900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:c1:53:50:83:9f:d0:d6:79:5d:04:ea:80:
6c:b0:b3:64:e6:f7:b9:11:b4:2d:5b:c6:62:4f:43:
0a:e3:0c:8b:da:aa:2a:57:d8:db:b2:8a:90:b4:ea:
4d:b1:1b:ba:81:90:8e:55:1d:89:0d:e0:69:67:bf:
1f:4b:63:63:f5:91:18:7a:4a:a9:1f:ef:ae:05:91:
fa:84:4f:3c:80:8d:74:5b:0f:90:39:f2:d1:e2:ad:
01:0e:c4:5a:a2:bb:03:fb:ce:96:e8:ae:55:d2:e1:
bb:3d:eb:00:a5:16:77:e1:54:b0:38:4a:05:d2:48:
41:79:0b:57:96:4d:ef:70:9f:f1:36:9a:0d:a0:1e:
9d:07:05:18:39:cb:89:ce:bd:bb:e0:e0:f9:ec:3e:
4c:94:7f:70:6c:dd:38:40:c8:6b:59:0a:f1:a5:cf:
ce:77:19:6a:bd:21:ce:e9:7b:b4:37:79:6a:86:aa:
9f:31:db:d3:ae:d7:80:1c:32:6f:bb:93:1a:a4:b5:
92:20:d3:b4:b6:4d:43:c9:19:d0:70:fa:a5:3d:ed:
8a:40:4e:8e:fc:b6:f4:22:71:1a:68:d5:48:02:25:
8b:6e:48:46:ae:b2:0f:6f:0c:76:c7:c7:82:c0:a9:
b5:7e:5b:bb:7a:ab:1a:56:74:fb:28:2b:84:33:04:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:57:F9:E7:52:BB:80:BB:15:6D:52:7F:10:B9:05:22:7E:A9:00
X509v3 Authority Key Identifier:
keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:51:ae:8e:84:00:83:27:1d:a5:db:d6:13:20:48:1e:93:4f:
81:8a:ab:b7:dd:3e:d0:b8:8c:3a:32:3f:b5:4d:63:50:52:56:
06:ea:fd:21:40:57:0a:86:9e:74:c7:d2:fb:06:68:4b:75:9d:
5d:6d:14:10:97:82:86:cb:6d:91:b8:98:0e:cc:78:44:1e:19:
3f:44:fd:73:20:d0:00:db:f3:b7:24:74:28:07:23:23:28:0b:
dd:07:90:22:0a:57:64:8f:01:f8:3d:33:1a:58:f4:ea:56:b9:
fe:ea:76:1b:af:1c:e1:b5:42:94:d5:77:52:89:d6:36:1e:4c:
16:68:68:c7:6c:33:04:16:65:1d:31:b9:55:aa:e1:46:85:c1:
e8:73:63:29:63:69:f8:fb:24:79:bb:10:89:74:d4:b4:96:05:
ff:79:2a:15:ca:f1:8f:81:e7:c0:b8:4e:80:1b:38:7c:28:aa:
df:7a:ed:01:e7:e7:fa:0e:a2:ee:ff:3e:5c:e8:90:46:5b:c3:
b2:07:3f:0d:f8:af:12:33:c2:a3:fa:bf:0c:49:c8:2c:ac:fa:
c9:3d:4d:01:37:14:fe:c2:b0:50:a6:c3:be:89:e8:f0:1c:69:
69:c0:e2:9f:c8:31:68:62:56:5b:55:dd:2d:52:52:a1:7d:ba:
c4:0e:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:07 2025 by rpki-client