Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier: 17YrOaKvYTTRA6Fo9tHFqStMnPZguiVtsYozIdAJck4=
Subject key identifier: 32:92:4A:6C:F2:AD:44:F1:E1:3B:43:B4:57:5C:7D:9E:17:0A:46:C6
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 01987E2ECED6226E272E1C584A1C48638838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 07:00:53 +0000
Manifest this update: Wed 06 Aug 2025 07:00:53 +0000
Manifest next update: Thu 07 Aug 2025 07:00:53 +0000
Files and hashes: 1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: qGzl5oR343blxEu0OkE0dNBgTYs5IbMsB1YQFKMNUl0=)
3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:ce:d6:22:6e:27:2e:1c:58:4a:1c:48:63:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Aug 6 07:00:53 2025 GMT
Not After : Aug 7 07:00:53 2025 GMT
Subject: CN=32924a6cf2ad44f1e13b43b4575c7d9e170a46c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:12:8e:99:12:ba:b0:be:1f:67:da:a1:3f:
d7:69:d6:55:4f:2c:cf:e4:0b:41:e2:e6:89:42:3f:
fa:29:10:0f:9e:d6:f8:23:25:e7:b9:ae:67:22:cc:
f7:12:fb:f5:2d:2d:7d:52:cc:96:32:0e:ef:ef:2e:
cb:9d:5f:9e:64:21:8c:c5:b3:5f:68:a1:4f:6f:c1:
58:9c:ff:93:29:0f:3c:a3:35:ba:8b:2c:55:ec:aa:
44:a8:33:d3:a2:85:1e:7e:2d:90:fc:66:11:27:9f:
af:18:4a:7f:9d:49:60:ee:38:f9:a9:3f:56:f5:a8:
03:0f:ba:c7:9f:85:f9:f4:a7:0b:99:24:f4:5b:6e:
55:e9:78:0f:56:bf:0f:d5:c1:74:56:25:bb:a8:99:
2c:74:b5:2d:da:d6:b8:0e:f1:ad:44:ed:b1:07:6d:
46:97:10:b8:6e:e5:46:cb:5a:e4:04:12:66:a4:3f:
da:0a:f8:f3:4d:bd:d7:0f:f3:62:e2:0e:1d:85:62:
c5:dc:70:71:4b:c1:98:e2:e5:dd:a4:1d:6f:00:e7:
44:ba:0a:28:b6:e9:c7:2c:fc:12:93:3d:ee:48:74:
ca:cc:76:5d:c7:38:08:c4:3d:0a:36:a9:25:6b:d0:
d9:37:de:f6:f2:86:39:be:a1:f9:da:9b:05:12:08:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:4A:6C:F2:AD:44:F1:E1:3B:43:B4:57:5C:7D:9E:17:0A:46:C6
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bb:22:20:ef:2c:f9:57:23:7d:a2:e2:38:5a:73:9b:e4:1d:
b7:58:03:cf:71:bb:a8:34:f8:88:ee:3b:e0:10:ec:28:5c:e6:
8e:e4:5d:fb:a6:b7:ca:cd:72:c9:84:a4:d8:b5:e8:dc:34:a6:
a9:62:2b:61:80:28:5a:d7:bc:f4:9e:8f:30:3e:5e:09:3e:ba:
f0:25:c5:9c:75:54:ff:7f:e5:8b:be:36:f6:29:43:9a:5f:b1:
08:46:da:81:69:b2:ae:e0:87:10:a4:cd:05:6b:e2:a7:5b:f3:
e4:a7:f1:90:83:87:31:5a:91:c4:ac:2f:0a:b2:29:9d:e8:3d:
09:eb:82:48:c9:ea:f7:fe:db:ba:3d:36:e1:bf:f0:1b:a1:9d:
9a:96:5a:b2:dc:74:a1:b4:ec:fc:f7:b0:3b:d4:5f:4a:4f:42:
be:60:e3:2d:27:09:84:19:43:f9:34:05:34:a5:2d:e0:68:44:
5b:b1:5b:e8:40:4f:b4:5b:7c:d5:e3:41:22:b5:ee:72:4c:90:
4f:0a:ec:8b:7e:03:a1:09:2c:9d:b7:9b:1a:92:bb:c0:d0:c1:
4a:94:9f:f4:61:b2:7f:28:7d:53:37:90:bd:43:1f:98:18:4d:
c7:33:59:dc:a2:6d:ee:84:36:39:c1:79:1e:4d:ea:53:55:04:
a7:14:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:02 2025 by rpki-client