Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: t1sME2YsH+01ZvmkTonSdm2mXXntuNyMFkH3Op4x+bs=
Subject key identifier: FB:78:86:83:07:23:0C:AE:26:8B:5D:0C:F3:BE:C2:35:44:8C:F3:69
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019873E3B52BB21098B98F2AF867A65435EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0ED8
Signing time: Mon 04 Aug 2025 07:02:39 +0000
Manifest this update: Mon 04 Aug 2025 07:02:39 +0000
Manifest next update: Tue 05 Aug 2025 07:02:39 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: 14vjs0P9B8SyJjmBrvuLxTO/K3psTK3HVGXpRO4Jtto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b5:2b:b2:10:98:b9:8f:2a:f8:67:a6:54:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Aug 4 07:02:39 2025 GMT
Not After : Aug 5 07:02:39 2025 GMT
Subject: CN=fb78868307230cae268b5d0cf3bec235448cf369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:eb:2f:0a:4a:db:78:3d:c1:87:9f:19:89:
a0:7f:23:a4:66:f3:84:f5:9f:71:56:d6:87:08:ba:
56:a1:ed:02:86:b9:7c:a2:2d:f0:e8:9c:b7:b4:28:
aa:48:f2:4e:92:e6:dd:f0:09:ca:d1:08:b6:d8:a4:
3b:e5:2f:e1:e7:f7:8d:72:84:97:3f:78:10:60:4e:
73:ef:1a:6c:b2:9a:a7:53:43:38:4b:27:ed:a6:7a:
e2:38:fa:3d:94:61:d6:ad:b2:1d:ac:ed:e2:e3:54:
d4:fa:de:7a:0b:03:8f:3d:2e:78:69:7c:68:00:6b:
bd:47:32:2a:41:11:dd:85:38:35:78:f6:cb:68:da:
e8:4b:6c:2d:f5:66:cd:58:3b:78:ee:25:3a:e9:50:
76:8e:e0:14:ac:4d:b7:71:32:7a:29:14:d7:bd:72:
c2:d5:3a:10:50:60:58:22:dc:23:cb:2a:be:75:b7:
3f:0c:5a:df:17:6d:ec:68:55:ae:11:4b:41:52:2d:
bd:46:e1:f9:13:d1:c1:be:93:23:bc:d9:61:44:b8:
f0:8f:29:34:36:f0:bb:3c:89:b0:32:10:69:ef:f2:
75:27:f3:e7:d3:99:f5:3b:4b:a8:bf:72:f0:44:15:
52:a8:89:2e:7f:ac:eb:eb:bd:6e:38:0c:b1:c3:07:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:86:83:07:23:0C:AE:26:8B:5D:0C:F3:BE:C2:35:44:8C:F3:69
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:38:c8:77:97:5e:75:79:86:b5:d0:00:55:0c:7e:39:a8:3e:
27:7e:fd:ce:bd:13:44:e2:e8:f7:24:21:36:28:35:9f:8c:90:
61:85:4b:2f:ef:b9:df:8b:d2:ca:9f:72:56:4a:66:62:59:0f:
f1:e3:a3:64:0f:cb:9f:8e:19:34:d3:29:ea:29:aa:a5:a1:17:
2e:10:13:a1:c9:2a:45:c8:c2:6e:1d:34:eb:04:1a:77:3b:d7:
ef:29:80:7e:35:fc:9f:1c:4b:18:1f:70:71:4c:24:6b:86:53:
8e:c0:09:f5:bb:ca:73:43:07:c3:49:af:ee:d6:ec:91:38:c6:
bc:bf:a2:72:bc:ce:03:aa:20:07:5e:67:c8:ee:7a:b2:0b:1b:
f0:79:0f:98:b6:8e:e8:ff:30:be:b2:7f:d1:90:bf:39:41:1d:
c0:0e:9e:57:cf:02:ef:99:56:23:2e:ca:a8:02:d9:fd:c6:f3:
65:d2:b0:a4:ef:c1:06:07:20:b2:10:c0:e1:5b:f2:51:98:00:
cd:a8:4b:f4:62:b5:b1:c6:70:c5:ea:0c:79:df:e4:cb:d9:38:
40:46:06:15:82:00:d2:3f:72:44:7d:8b:a9:58:81:e5:bf:1a:
f3:00:94:c5:9f:ae:09:6f:0b:63:fd:c1:96:0a:96:60:b5:01:
0c:3c:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:09 2025 by rpki-client