
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: ZeU6fg2Nf2ZtkpYTEh8prbRXkFL7Qs7TtcxaWc3iH18=
Subject key identifier: BF:FF:25:14:ED:C8:B8:84:2A:A4:08:58:BA:29:58:EA:2B:FE:CF:91
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 0198733D9991824279A3E789B9998FC536FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 42
Signing time: Mon 04 Aug 2025 04:01:13 +0000
Manifest this update: Mon 04 Aug 2025 04:01:13 +0000
Manifest next update: Tue 05 Aug 2025 04:01:13 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: jTE8KPFdAHwpdaJsK8moOUI2fDJe3WdDlMkwQM5/lAI=)
2: pZiY96ECGZ3enErASsqWJWksnRo.roa (hash: MEeiZ1S6byAdXpmL3x1KNRz/NrRtbh43pA6SZ1saEAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:99:91:82:42:79:a3:e7:89:b9:99:8f:c5:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Aug 4 04:01:13 2025 GMT
Not After : Aug 5 04:01:13 2025 GMT
Subject: CN=bfff2514edc8b8842aa40858ba2958ea2bfecf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:fb:43:6a:8c:ab:ba:ae:b6:20:d6:4a:af:
2f:e5:ae:13:25:51:9b:99:a8:b5:2a:91:08:8f:70:
23:af:44:d0:2f:50:7d:67:46:f8:28:72:fd:2f:01:
e7:b8:9a:c6:5d:66:0a:c8:bf:a8:d9:50:47:e4:12:
d2:bd:d2:c4:63:61:6e:bf:1b:22:64:ed:3c:1d:2d:
b1:0a:9e:08:58:3a:05:15:b4:d7:9e:30:42:0f:8a:
e3:4a:ab:50:01:41:18:78:a3:99:c7:62:c9:a8:6a:
12:a9:98:10:e1:76:74:5c:3f:89:0f:2c:17:a3:1a:
d5:9b:07:82:0d:eb:ba:66:77:82:5b:86:b4:6e:d2:
37:ca:8a:a3:14:ec:a8:fa:c2:04:b8:af:86:1f:e3:
30:1f:97:c6:15:39:1b:ae:af:33:d2:66:f3:60:3b:
85:a0:d2:9b:8b:74:99:16:ff:77:34:aa:6a:db:b5:
cb:f3:88:3d:55:e0:66:79:d5:64:c7:f3:aa:45:48:
91:66:f2:61:90:9f:71:e9:ba:71:bb:ab:d5:9a:2b:
37:37:de:b8:a7:8d:ed:74:bf:27:e4:88:b5:8a:8b:
a1:f9:73:43:ae:fb:a4:76:ee:54:37:0c:ac:0c:6c:
a9:13:c4:c3:4a:77:28:89:2b:7d:f1:df:6c:f0:08:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:25:14:ED:C8:B8:84:2A:A4:08:58:BA:29:58:EA:2B:FE:CF:91
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9c:21:18:5e:8c:6b:d6:7b:df:eb:b8:70:e4:f6:c9:68:b9:
6a:71:cb:73:f4:5a:eb:04:b5:f5:fe:7d:5b:be:a6:5c:64:3c:
30:14:9d:27:c0:a6:2e:55:3e:d0:27:08:76:04:d4:b0:dd:31:
03:66:52:8b:02:06:9c:dc:e2:13:52:5c:d3:b4:3b:24:40:bf:
ac:0f:ce:df:37:c4:4a:9f:16:54:6e:fb:33:99:c8:a1:b3:f3:
1c:b7:1b:e9:db:d7:61:2a:bf:ac:19:7e:8e:33:7e:40:2d:d4:
5a:28:fb:91:ca:b6:be:ee:3a:5e:9d:f0:31:6a:31:05:19:6d:
7b:f2:e3:d2:9d:ce:1f:a0:ed:00:68:4d:45:a5:e1:b6:82:6e:
41:ad:07:13:3c:4e:7a:69:f9:9d:8a:c3:42:2b:a6:dd:a1:6c:
e7:7d:c2:08:f9:44:82:d3:bc:30:b2:b5:df:5b:1f:6d:74:74:
83:8b:de:5c:7f:38:1b:67:97:d1:fc:1c:a6:7b:07:96:de:50:
7b:3e:ad:87:72:62:c9:16:61:7d:09:ed:f1:2e:52:76:e7:f5:
f8:ff:d8:43:de:d2:08:ff:46:39:48:fc:6f:f2:e7:92:1f:f7:
f1:44:90:5e:42:dc:d8:8a:ba:7d:4f:6c:1a:58:ca:3e:84:29:
65:97:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:07 2025 by rpki-client