Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: ctYG6KHyHkFut08Xzq+sRnzY138JfhL8JsT5lOS4xAY=
Subject key identifier: E0:A1:0E:A2:F5:DA:21:DC:DA:DE:0C:56:8C:85:40:39:77:6C:B9:12
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 0198963732F848FB844CED2F4E390581E3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 120B
Signing time: Sun 10 Aug 2025 23:00:56 +0000
Manifest this update: Sun 10 Aug 2025 23:00:56 +0000
Manifest next update: Mon 11 Aug 2025 23:00:56 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: 8lBNyZWNMo7RJ55EpoxJQkvT2rVXb13rH8D1D4UpoHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:32:f8:48:fb:84:4c:ed:2f:4e:39:05:81:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Aug 10 23:00:56 2025 GMT
Not After : Aug 11 23:00:56 2025 GMT
Subject: CN=e0a10ea2f5da21dcdade0c568c854039776cb912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:6b:88:59:e2:37:78:13:3a:e0:da:d0:b9:
63:aa:64:06:b1:a6:df:33:76:21:45:ce:d0:cd:9e:
b0:56:32:26:a8:85:5f:bd:c3:93:8f:48:9c:26:82:
04:19:1e:76:d5:2e:bd:72:db:dd:55:8f:17:54:6e:
76:ef:36:5d:b5:ec:85:56:ce:02:38:b2:17:25:c2:
b9:d7:cf:4d:19:d8:79:c3:80:97:22:6f:63:6e:58:
59:71:78:96:26:d8:14:6b:67:0d:5e:37:4f:41:0b:
dc:2e:52:64:15:9e:5a:1a:37:c2:3f:2c:e8:23:2f:
57:83:5d:33:ab:16:a0:ed:a8:2b:32:55:49:b8:ba:
57:39:92:5e:cc:8a:a2:64:c5:63:37:4a:a1:9f:39:
a5:d8:a8:36:1a:ee:9e:83:1e:3c:4c:96:9a:53:ee:
6d:52:72:a3:fc:b0:10:e5:3e:9b:32:28:7b:bf:07:
3e:38:4b:28:26:bd:c3:10:c9:ba:e3:85:6c:51:2c:
de:64:48:31:4e:95:6f:27:17:ae:73:5f:d4:5e:1e:
cf:1f:90:82:97:7b:b3:ef:33:0f:11:3d:66:47:fb:
16:00:06:95:ee:e3:1c:aa:52:80:74:6b:09:e0:cd:
77:3c:df:92:d5:18:e0:29:cd:be:47:c4:ad:1e:0c:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:0E:A2:F5:DA:21:DC:DA:DE:0C:56:8C:85:40:39:77:6C:B9:12
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:0d:cc:0d:34:2f:17:3e:e3:53:6f:d3:35:6a:b8:ff:b5:
60:a6:82:ed:2d:cd:9f:f4:88:d9:6f:77:aa:3d:d0:c0:37:7d:
a9:b7:ed:4b:12:a8:ff:db:5d:c9:3c:dd:61:d6:b6:57:2a:2c:
09:01:21:6c:6d:f9:18:5c:22:e3:25:e5:6c:3d:f1:c9:1e:2b:
55:0a:5a:f5:b2:cf:bc:d4:06:9d:da:d0:70:8a:3a:06:40:4b:
17:67:d3:7e:dd:11:f1:42:21:b0:78:ea:18:37:e0:54:aa:28:
85:08:a8:16:d3:30:2d:dd:d2:75:b2:2b:78:85:67:4f:1d:24:
31:e4:50:18:bf:0a:a6:ae:87:25:b7:17:e8:d7:fb:8a:65:84:
46:25:b0:a5:f2:06:db:18:79:b4:c6:00:5c:a5:7e:f4:bd:62:
03:0c:6d:52:e3:c3:f4:6d:46:01:40:28:c4:be:39:53:84:a4:
75:70:ce:f5:b8:24:09:58:9b:b5:86:37:f2:4c:74:c7:93:c5:
57:08:51:28:58:2f:65:3a:0b:59:2f:3a:14:85:55:16:1d:4c:
23:7d:c9:88:64:55:a0:ec:a7:a0:86:15:0d:0a:6b:a5:e1:25:
0a:db:d2:52:b1:c6:91:7d:1c:5e:28:31:d1:c7:eb:fc:83:5f:
b5:48:65:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:59 2025 by rpki-client