Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: HmV13T6wGqYc/ZsfXvlRiJUysBRJGqq1x64qKoGwTUc=
Subject key identifier: BB:63:CF:1D:45:B6:3D:E3:FB:6D:9C:5E:06:5E:F4:ED:76:98:EF:9D
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019881D48CD19534E2A8ED94F536862EE5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1570
Signing time: Thu 07 Aug 2025 00:00:47 +0000
Manifest this update: Thu 07 Aug 2025 00:00:47 +0000
Manifest next update: Fri 08 Aug 2025 00:00:47 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: hIrL4hxOVfosLL8JoqxTufKTvsYok+jZPql7jJ44qVI=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:8c:d1:95:34:e2:a8:ed:94:f5:36:86:2e:e5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Aug 7 00:00:47 2025 GMT
Not After : Aug 8 00:00:47 2025 GMT
Subject: CN=bb63cf1d45b63de3fb6d9c5e065ef4ed7698ef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:67:7d:47:ff:aa:b9:a1:c6:d3:81:8d:db:
83:3c:41:1a:00:80:4d:5c:00:db:41:e7:3f:6c:10:
a1:c0:30:f8:e4:25:00:1d:c1:7b:d1:c4:4f:fa:9b:
9a:6e:60:4c:b3:13:a7:c9:94:d4:d1:b6:6e:14:06:
37:e3:17:8e:22:1c:84:3d:7b:dd:c4:3a:3a:cf:48:
57:3d:89:cd:f7:d4:04:ae:76:69:32:e5:6d:90:a7:
04:6f:56:5a:b8:a0:bf:f5:09:93:3b:c6:76:15:8d:
c3:96:78:00:b9:b4:e9:e1:c3:fb:8a:73:9b:5a:c9:
9b:5f:bc:85:f4:1a:66:b0:b3:aa:8d:60:57:8c:3f:
da:f5:90:61:ec:81:f8:d1:e6:c8:ed:80:40:f1:bc:
fe:2c:8e:da:7f:30:3d:c8:bf:47:86:0e:df:3e:90:
8d:df:50:7c:ac:7b:06:4a:c3:1a:2e:49:4e:74:26:
3a:c9:c3:b0:01:ff:7a:7e:8f:8b:29:b1:21:b6:35:
12:77:2d:fe:0f:c0:9f:b4:89:89:85:11:8f:b3:00:
96:ef:df:42:93:a5:33:f4:96:c2:52:9c:3e:1a:52:
11:a3:73:21:12:4d:9c:b3:8b:9e:14:94:31:7e:ed:
71:a5:f1:7f:4e:90:cf:2f:67:4c:20:97:a9:5f:a3:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:CF:1D:45:B6:3D:E3:FB:6D:9C:5E:06:5E:F4:ED:76:98:EF:9D
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2f:59:60:f7:76:33:53:dd:f1:56:82:3f:10:b8:39:c2:42:
ae:e1:22:3a:a0:9c:85:de:89:b3:25:d0:7e:3b:4e:d5:95:eb:
9d:36:6f:8e:ab:d1:a2:78:83:cf:fd:70:cd:d1:59:3e:9a:eb:
02:92:9c:82:6d:6c:72:74:4e:38:5b:93:00:b4:50:64:ea:52:
e7:4c:a9:53:af:56:63:95:ef:84:44:df:a6:20:91:f4:e1:96:
df:e8:2a:45:7b:c3:e6:93:c6:a4:31:db:e8:ec:f9:b5:d7:4c:
06:6e:aa:36:13:3e:8d:3d:74:4d:cc:34:6d:43:29:b3:29:98:
a8:7f:e4:c5:d2:20:cc:df:a8:e4:f5:06:43:3f:a6:3d:da:61:
63:b3:53:24:18:b9:14:68:92:77:d5:c6:ec:72:3a:36:10:26:
fd:a6:05:1e:73:f8:03:83:84:7a:a7:6f:9d:2b:f3:28:33:b0:
7d:65:24:26:23:9c:f1:f2:22:8a:17:82:9b:54:46:68:b0:60:
1b:e1:47:8f:2a:cd:6d:b0:04:bf:3c:f3:c8:30:e5:5e:0e:3e:
88:b4:31:09:37:cc:32:24:24:9a:28:b2:a6:bf:83:27:e8:6c:
37:7e:f6:74:db:11:5a:f8:46:50:e1:d5:08:aa:39:57:be:26:
9a:4c:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:41 2025 by rpki-client