Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: dsgjsy7AAZ7FwBI8vq1BZBNqbQQKfGTqZqySqyPPcdo=
Subject key identifier: 1A:B5:95:C4:AC:F6:FF:77:E8:E3:C6:6C:BA:23:9E:99:2D:B1:A3:85
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 019873E23AEF08917C9328DF4806AB0E15E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 12DD
Signing time: Mon 04 Aug 2025 07:01:02 +0000
Manifest this update: Mon 04 Aug 2025 07:01:02 +0000
Manifest next update: Tue 05 Aug 2025 07:01:02 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: L8vQYdt2T+R6m3M4+CJ3rVB5If5sgfVTYnyJm3BbRTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:3a:ef:08:91:7c:93:28:df:48:06:ab:0e:15:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Aug 4 07:01:02 2025 GMT
Not After : Aug 5 07:01:02 2025 GMT
Subject: CN=1ab595c4acf6ff77e8e3c66cba239e992db1a385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:73:c7:3d:0f:36:98:a7:65:ab:f0:7a:fc:
80:83:40:c7:d5:6e:a8:1f:62:94:90:0c:44:c6:cc:
07:30:f1:10:e4:de:47:89:b2:55:bd:80:b3:e4:05:
6a:dd:25:3d:77:1a:ec:fd:bc:90:0e:a5:f8:d9:1c:
01:52:be:e6:24:93:68:3d:d8:a3:9b:e5:24:0a:40:
d2:fe:99:d8:c4:00:62:06:a7:3f:00:cc:5e:b3:69:
a6:f8:52:1b:fc:57:49:4b:b8:ea:92:ce:ba:08:b4:
da:e7:d8:e0:dd:90:88:a5:34:85:ed:7d:27:8b:93:
07:3d:ad:6f:27:e0:70:27:85:37:ad:6f:cc:fa:40:
c2:73:ff:91:1e:a5:91:3f:d7:ee:8c:0f:79:60:5d:
6f:64:a7:3b:a0:83:8a:2e:c0:b7:3c:ba:17:76:76:
75:6c:09:db:68:1a:9a:9b:4d:59:e2:68:da:44:a9:
92:39:7b:f7:8a:86:e1:3b:2a:3d:7a:12:63:a6:3c:
22:f0:e4:3f:1c:c4:3f:dd:4d:f6:04:51:19:66:8d:
40:28:23:8c:08:da:cc:7a:54:f6:a6:25:4f:09:b9:
09:b5:13:64:6c:cc:72:b6:fc:66:e9:04:86:e1:d9:
5f:62:8c:09:25:f8:06:e1:ac:36:91:72:80:e3:f5:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:95:C4:AC:F6:FF:77:E8:E3:C6:6C:BA:23:9E:99:2D:B1:A3:85
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:33:e1:58:20:57:4e:a6:45:18:e2:7b:c8:31:7b:30:10:
72:27:c3:06:33:c2:42:d2:f4:53:95:1b:f9:60:da:4e:8d:93:
f5:7a:40:43:bd:db:1d:3d:6f:84:e3:88:6e:1f:a6:30:5a:a6:
04:f2:7e:0b:b6:89:26:0c:45:ab:46:76:4b:5d:f3:0c:8f:10:
64:e4:51:28:13:e0:f3:2f:2a:cf:c5:e3:23:33:c2:d6:55:9d:
0c:e2:40:f3:e2:de:fc:9c:c5:e1:9a:13:c9:44:db:f2:ed:e7:
e4:0d:e5:95:b6:b8:5b:06:38:36:1f:f6:e6:bb:fb:d6:3b:58:
6e:f2:f7:d9:ac:d1:87:a8:28:c7:21:2d:97:10:cc:ad:56:ee:
65:66:ba:bb:1d:f0:02:d2:da:f5:4b:d0:f6:b9:c3:f3:62:16:
3b:76:c2:2e:bc:13:ea:98:3d:ba:2c:ef:9a:7a:ce:d2:b6:74:
9e:5f:ea:19:82:75:4a:9d:d7:dc:45:80:ba:1e:23:32:58:bf:
74:b2:3c:6a:34:2d:cf:03:0e:ba:01:06:5e:1a:96:a2:61:c2:
25:13:88:3d:08:6d:36:21:27:db:05:de:fe:f4:6f:be:72:88:
88:88:bd:7b:97:9b:96:bd:af:95:e6:19:be:07:6f:af:f2:b2:
e6:3b:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:27 2025 by rpki-client