Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: qwSw7uCoP5s7I7GbVd44nmvId1qLHf0A1kLWYHWrv2I=
Subject key identifier: 48:CF:83:0A:19:36:72:D4:93:96:5E:5E:6F:E3:C4:07:C7:A3:FE:1B
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01988543A845405CEB24B802FFB071D7587B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 16:01:00 +0000
Manifest this update: Thu 07 Aug 2025 16:01:00 +0000
Manifest next update: Fri 08 Aug 2025 16:01:00 +0000
Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: v0zgoFtmyN//d1IltSJt28i3kuiAM0Y2tfqGntZA/V8=)
2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=)
3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:a8:45:40:5c:eb:24:b8:02:ff:b0:71:d7:58:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Aug 7 16:01:00 2025 GMT
Not After : Aug 8 16:01:00 2025 GMT
Subject: CN=48cf830a193672d493965e5e6fe3c407c7a3fe1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:5c:c9:e5:9e:37:5e:7f:00:d1:e1:b8:95:
97:ef:d4:a1:8b:e6:2a:7b:e3:97:41:26:00:d9:1d:
53:4a:40:5f:e2:2d:a1:20:c3:ea:7f:66:57:a9:c7:
18:ca:ce:83:4e:da:cb:7a:9c:7b:37:d7:af:1b:5d:
9a:57:fe:d4:a8:cb:f5:cd:f9:97:b7:4e:ab:73:de:
4f:62:1b:53:b7:4e:c2:cf:6d:3f:40:fb:f1:da:57:
18:b6:48:81:1e:68:3e:0d:a8:ea:20:c8:ad:55:15:
c3:73:36:24:44:3d:08:91:37:7f:48:12:99:97:a4:
75:04:15:41:ea:cb:26:46:17:58:55:b7:3e:9b:53:
c2:7b:8b:dd:74:57:cc:aa:e1:80:f6:cd:d7:0f:56:
3c:ec:34:60:aa:5a:16:32:b5:c3:f9:29:6e:e9:cf:
3c:84:86:6e:17:db:a6:a8:05:7f:ba:46:5c:9c:9a:
5f:b0:ed:2c:a0:df:25:9d:3d:b3:38:0f:b7:ae:7d:
39:99:a5:5a:3c:21:ed:aa:64:7b:7c:ae:fc:7f:4c:
ff:eb:a9:f0:21:65:83:88:1e:6b:0d:fe:2f:eb:60:
0a:4f:db:40:74:7d:aa:68:38:d2:dd:f6:6a:05:47:
0f:ea:8e:c5:42:c1:89:87:86:b9:28:6a:c5:ed:50:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:83:0A:19:36:72:D4:93:96:5E:5E:6F:E3:C4:07:C7:A3:FE:1B
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:f5:26:20:e4:1f:dc:f5:2b:e3:16:9b:72:1f:d4:82:5b:0a:
85:a6:e3:f9:e2:5e:10:db:d6:0b:4e:40:ea:07:79:42:86:a3:
f7:ad:f1:8a:09:59:88:d5:a7:f9:66:5e:dc:a0:bc:6f:a8:79:
66:39:5e:70:7c:9d:cd:b7:63:71:66:68:bb:32:65:12:b8:8f:
d6:d5:b9:1a:18:1d:1d:a6:9e:2d:b2:34:04:1d:ac:5d:14:34:
35:96:80:f0:72:1b:46:4c:0a:1e:96:0f:e7:bb:fe:22:f6:2b:
00:95:39:b3:4d:70:a6:0a:c5:62:98:c8:6a:c0:72:3f:3f:82:
d1:42:b6:32:f6:c4:d5:8b:a5:a6:ec:14:7e:15:7f:6e:cb:f1:
01:07:33:8f:da:e2:d7:3d:02:aa:35:3a:29:03:52:53:7c:22:
6b:60:6c:b5:8c:b5:5f:f4:76:5b:c9:e6:04:17:f6:31:65:91:
c2:10:f8:54:12:3e:92:2e:a3:1f:c4:a1:ed:a8:86:8d:e6:6f:
b8:32:e0:62:69:71:f6:76:f4:9c:db:fc:29:40:bd:1d:d1:da:
e4:3f:26:85:20:61:41:89:56:03:58:64:25:31:a1:00:86:75:
59:74:76:4a:5b:60:d4:e6:54:fe:e5:16:f6:f9:3e:39:33:70:
c9:a9:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:52 2025 by rpki-client