Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: cEL0NHBMLSUqUsOIJRdEZCQU6MprXVkJUu/G5JMdCgk=
Subject key identifier: 97:1F:91:D2:37:E7:B6:A1:60:E5:6C:3D:9E:61:70:61:7A:8A:B8:15
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 0198A04E9C6D8A562DD3CCDE746CCB531133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1631
Signing time: Tue 12 Aug 2025 22:02:43 +0000
Manifest this update: Tue 12 Aug 2025 22:02:43 +0000
Manifest next update: Wed 13 Aug 2025 22:02:43 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: GITVNWUrv2O88AOQb9x+200b930pM41btq68lU8L/eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:9c:6d:8a:56:2d:d3:cc:de:74:6c:cb:53:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Aug 12 22:02:43 2025 GMT
Not After : Aug 13 22:02:43 2025 GMT
Subject: CN=971f91d237e7b6a160e56c3d9e6170617a8ab815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:f2:cd:f6:0a:49:ab:4b:bb:6a:54:ff:7e:
4a:50:3c:01:bf:33:34:e8:bc:6c:6c:a8:0b:db:89:
40:6f:d4:89:4d:6c:d9:94:56:7b:7d:09:9b:44:2d:
a5:59:1f:2e:92:9c:6e:29:24:ff:5f:08:aa:34:e9:
b0:bb:1d:f2:c0:f4:5c:aa:dd:97:56:42:aa:f2:aa:
a0:4e:a2:bf:14:1c:11:b7:af:47:1f:89:d4:2f:e3:
29:87:2d:2b:61:20:e6:6b:c2:00:9e:93:6d:c9:96:
2f:7e:72:37:32:f9:94:af:e7:2c:58:f8:c2:1c:9e:
83:c0:6a:e0:ac:4d:0b:fa:10:7c:36:ff:32:46:14:
5b:c6:a6:18:70:0b:56:91:b9:71:5e:91:82:0e:ce:
22:e2:b1:9f:6f:01:40:ca:4a:94:a3:9e:1c:bf:a1:
78:db:f6:81:d7:32:ec:ea:aa:8f:b9:48:9f:28:4f:
72:ce:df:a2:94:40:59:05:96:15:a9:8d:ae:58:ba:
64:2e:5b:fb:df:27:d7:14:33:c6:7d:2b:bc:b3:91:
8a:09:01:77:57:4c:df:ca:aa:f2:8c:be:d7:61:a5:
e2:49:fb:d2:76:52:95:ed:ef:57:f9:2d:15:36:be:
bb:1f:03:8a:8c:18:8f:41:3c:81:98:2d:ee:cc:cc:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:91:D2:37:E7:B6:A1:60:E5:6C:3D:9E:61:70:61:7A:8A:B8:15
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:90:25:06:5d:74:3d:8d:73:bb:55:ed:d3:75:4f:34:e5:c6:
2e:fb:30:90:f3:10:95:71:af:d1:4f:27:52:c2:2d:db:eb:b8:
52:76:51:74:8b:e2:c5:70:c7:ab:b7:9f:9a:fa:65:2a:9d:41:
5d:86:bd:59:62:0c:db:66:00:90:73:17:b3:d2:fb:7e:63:73:
17:92:c6:9f:33:8c:f7:d6:a0:e6:5f:fe:f6:a4:b6:27:c9:38:
e2:e7:d2:2b:df:ab:5a:dd:bf:fc:71:37:3d:38:98:b9:ee:d1:
fa:78:43:58:9d:c4:e4:66:b7:e7:29:cf:94:e7:3f:cf:35:f2:
5b:4d:b4:ab:82:75:23:39:6d:10:49:15:a9:6e:ea:4f:ce:6b:
09:49:1f:f5:7a:4d:d9:0f:4b:6e:9d:ef:59:12:ca:e5:70:05:
1a:82:4c:86:b3:a5:06:4a:4d:91:21:b0:a7:7c:3a:28:4d:72:
52:47:36:05:0b:3d:53:68:f4:1e:6e:51:a2:38:32:6c:b9:d1:
d5:d6:67:48:f2:30:a6:a4:6f:a9:57:92:b2:c6:57:cd:bd:fa:
d1:d3:75:5b:23:96:e3:2f:c4:67:98:c1:09:f1:7b:cf:87:eb:
1b:b8:72:ac:cf:8d:77:e5:70:42:05:40:b0:81:c6:75:90:f1:
a3:b4:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:10 2025 by rpki-client