Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File: JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier: 6vM9o+2xKU5a6Fsm2sUu8m7GCID9Zwt0gIjV08osL74=
Subject key identifier: CF:F2:8B:0B:32:17:78:80:46:69:E4:56:CF:E8:17:E2:B6:87:9B:6E
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial: 0198955B0F271A0DBA640341C836078F1B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number: A2
Signing time: Sun 10 Aug 2025 19:00:29 +0000
Manifest this update: Sun 10 Aug 2025 19:00:29 +0000
Manifest next update: Mon 11 Aug 2025 19:00:29 +0000
Files and hashes: 1: 1-hKq9wb4D_GY_fnZO_c_s4LLEX0.roa (hash: GBxwWVnB/Rc6j+xa3+zoxw/YNpQwaqrDeItK1vr3xY4=)
2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: qWgD/f5Y7/AhzLqCVBBqmPzIl0K9u+rAyK2hQmEEl30=)
3: TOkxEOih0AWVPHi1e8WKWrt7QXA.roa (hash: dzQs5/UcI04rskBqMhv8VF3TcibwTWfajt/YKT8d1pQ=)
4: eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa (hash: lAwc3uWm+AaQ5JvjoDVtmKeHt76LzcXeYzYWfm4Odtk=)
5: jZbpJpit-Lsd4dvBv-eijT1tPzY.roa (hash: 4vmUiP1P84jE5ddsRzTqHbpq5+SB2pApAR6uzAQoPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:0f:27:1a:0d:ba:64:03:41:c8:36:07:8f:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Validity
Not Before: Aug 10 19:00:29 2025 GMT
Not After : Aug 11 19:00:29 2025 GMT
Subject: CN=cff28b0b321778804669e456cfe817e2b6879b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:3a:6a:2b:6f:0b:54:7b:65:91:1a:9e:9c:
6a:4c:97:e6:fb:02:3d:2d:93:c2:db:d7:6f:8b:7f:
e7:6c:7d:b1:f2:a4:6e:8e:01:b9:68:4d:42:20:7c:
4d:7e:ed:ac:8d:22:d6:c3:99:c8:65:c6:50:86:f8:
0a:b1:79:35:48:c4:77:94:c6:49:33:67:95:be:01:
1d:c4:ed:12:a4:b9:47:e7:69:36:69:75:23:19:6a:
e9:0c:6e:b8:8c:70:d9:38:61:9c:67:bf:dc:71:9f:
62:9e:db:21:ac:65:f9:b5:4e:95:a9:0b:e0:c7:31:
c7:bd:2a:df:c1:59:cf:c7:81:fa:d4:ac:ea:70:9d:
f5:a2:ab:f4:f3:09:8f:e9:ac:c7:90:3e:9c:d1:36:
0b:7a:87:c0:0f:92:64:ef:bc:b1:0d:85:aa:bf:ea:
81:14:6e:d6:1e:a6:65:ee:a3:00:60:9e:37:13:e1:
4a:0d:52:61:2e:3a:fa:47:f0:9e:10:a5:9d:79:16:
a9:b6:3b:5b:98:37:ce:eb:8f:32:d2:3c:cf:64:27:
46:58:34:e7:69:5b:3a:28:b9:cf:fc:ee:93:57:d1:
6a:c3:2e:9d:b5:fc:f0:5f:9c:ec:24:e4:e0:0c:4c:
96:52:2b:02:f5:ba:ee:80:a4:f8:c2:5c:6f:27:cf:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:8B:0B:32:17:78:80:46:69:E4:56:CF:E8:17:E2:B6:87:9B:6E
X509v3 Authority Key Identifier:
keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:4c:bf:d6:7f:87:74:65:23:d0:66:be:b0:fa:e2:a8:29:
7d:dd:16:c2:49:8f:c5:5d:47:9b:f0:3f:59:ef:af:43:1c:83:
09:ce:76:ae:3c:bf:4a:e4:3f:49:05:68:11:6f:0a:28:7b:62:
9c:19:73:c9:fe:1f:3e:16:bd:e1:1e:58:47:27:c3:4c:de:35:
5a:1e:b3:bc:8a:ce:8c:09:38:55:e0:b0:99:49:a0:5e:79:9b:
9b:47:29:fb:23:e1:59:12:bb:dd:25:84:b1:52:6a:5b:33:8b:
c7:89:3b:40:8e:50:2d:e8:fd:46:37:21:80:9c:f9:6a:10:09:
b7:f2:28:ce:29:96:5f:64:7a:99:05:7e:c5:1d:d5:09:3a:4c:
3d:76:ff:11:2c:58:1f:c7:91:c8:28:75:c5:dd:48:94:ec:12:
4a:68:3d:09:48:87:7b:84:c9:03:1b:d8:05:e5:97:92:ae:f3:
c1:6e:17:d8:82:9e:03:15:47:44:94:ed:bd:1e:8a:b2:9a:14:
e2:47:59:ce:4d:a8:4c:7a:1c:d6:97:ec:58:81:a7:1d:7f:d0:
ee:98:2b:4d:93:dc:9b:c6:d7:fa:3a:10:08:6a:df:fa:03:0a:
0b:b2:42:60:af:d2:a4:ea:be:1a:14:25:f9:09:54:53:a2:25:
ca:f6:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:24 2025 by rpki-client