
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: 0Ok8VDhCdPdIFLgie56kWBEaVetTXqz3CP8PPTrYgZw=
Subject key identifier: AA:D0:C5:97:F8:5C:56:2E:43:A9:0B:B4:1F:1B:0A:1A:F1:CB:F7:5C
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019874190BB5DB752F32C6FD374EFA14A121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 153E
Signing time: Mon 04 Aug 2025 08:00:55 +0000
Manifest this update: Mon 04 Aug 2025 08:00:55 +0000
Manifest next update: Tue 05 Aug 2025 08:00:55 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: f4zI1nq6KnTHOAQWWZeHnxLYR+AleNWlys46VkjRWfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0b:b5:db:75:2f:32:c6:fd:37:4e:fa:14:a1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Aug 4 08:00:55 2025 GMT
Not After : Aug 5 08:00:55 2025 GMT
Subject: CN=aad0c597f85c562e43a90bb41f1b0a1af1cbf75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:18:09:3a:71:d5:94:b6:ec:26:5a:61:4f:
de:83:0a:49:a7:74:fd:49:86:97:61:d3:dc:bf:af:
cd:70:a1:cc:a2:98:4f:92:ab:1c:b0:66:83:92:e6:
4f:bf:5e:25:4e:02:8c:e5:b6:c3:2d:26:70:5e:f1:
f9:9c:22:64:ea:ac:ca:b6:24:e8:3b:c9:bc:fd:c9:
57:3b:ab:0c:25:a2:fc:65:c9:dd:45:70:67:68:5e:
62:05:51:9e:6b:b4:67:bd:50:8d:cc:53:24:fd:9e:
5e:bb:79:5f:bd:79:23:e2:56:1f:ba:8f:42:21:92:
c0:da:e7:10:95:35:ac:49:c6:cb:0f:13:99:ce:47:
56:d5:db:16:01:1f:62:d3:39:27:c1:7e:64:90:07:
32:f7:34:d6:91:a2:36:cf:bb:31:a5:c7:ed:03:be:
d0:51:0d:34:71:21:fd:f9:89:9a:c5:88:01:85:f3:
5d:c0:80:dd:6c:45:c1:c8:60:fd:95:fc:5f:1d:fd:
8b:69:54:2e:7a:c5:f0:70:b0:ec:24:21:4d:20:a6:
3d:03:e4:70:e1:93:52:3d:f9:bb:4c:a8:3e:9d:53:
35:13:68:40:f6:30:3f:11:23:1f:cd:1e:7d:85:c6:
45:b4:5f:f0:9f:db:bb:5c:03:3f:a0:4c:1f:a8:e6:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:C5:97:F8:5C:56:2E:43:A9:0B:B4:1F:1B:0A:1A:F1:CB:F7:5C
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:11:7c:81:fe:c8:49:4b:4b:d1:49:32:ff:25:58:7c:3d:
13:b5:21:37:89:46:37:83:f2:a9:59:05:15:18:78:99:9c:3b:
1b:f9:9d:de:dc:6e:41:73:62:d7:9d:c1:99:7e:35:49:69:b8:
82:94:57:b2:0b:cc:4d:ec:53:cf:61:a9:5d:c8:5d:7b:63:03:
ff:e7:e8:05:f0:57:01:99:f6:ec:c6:5f:cb:9b:30:fd:0e:38:
35:0b:61:81:7a:fb:9f:49:c6:ee:af:d4:3c:aa:c6:cd:57:09:
19:31:4d:ee:bd:df:d3:2b:54:b0:ed:14:85:7d:d2:c2:f1:2a:
80:81:30:2c:1a:93:3e:92:36:3b:21:dd:5e:2c:44:63:bb:d0:
f0:45:25:07:07:ad:d0:a5:1f:48:8d:79:b8:d2:76:38:58:67:
5f:9f:2c:0e:bc:67:b9:85:58:ee:52:50:77:a0:f9:17:02:a2:
38:66:c2:bb:b3:5d:2d:43:5d:39:c8:e3:30:b6:8d:d8:11:13:
12:7d:95:4a:ef:99:87:a1:d2:35:a0:47:e5:eb:e1:c9:b1:bd:
21:a7:b8:db:db:ce:65:60:09:c2:bc:c5:16:ad:7d:9d:61:bd:
4b:ac:22:18:2c:82:5c:46:71:91:e8:fe:91:1b:30:05:ec:79:
d1:11:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:47 2025 by rpki-client