Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: 9Ix5wmfOvRk1eenSWFRMXJ7dByks7lrSow1nhO4qdQs=
Subject key identifier: 41:93:D7:B7:5C:71:EC:15:BF:C8:88:D3:9C:60:04:C1:B2:B6:34:43
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 019847ADDD2BCD99F50FBC6757FD7A4751B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 08F1
Signing time: Sat 26 Jul 2025 17:00:33 +0000
Manifest this update: Sat 26 Jul 2025 17:00:33 +0000
Manifest next update: Sun 27 Jul 2025 17:00:33 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: UNx8gA71sQkfDnHoyNRB6uZkoJEHKsCgE8jNHaGlCNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:dd:2b:cd:99:f5:0f:bc:67:57:fd:7a:47:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Jul 26 17:00:33 2025 GMT
Not After : Jul 27 17:00:33 2025 GMT
Subject: CN=4193d7b75c71ec15bfc888d39c6004c1b2b63443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:a0:42:99:a0:6e:37:40:ef:8b:5c:c2:5b:
c5:95:29:a5:52:75:97:1b:4d:95:8d:6e:28:87:1f:
54:d1:d6:8c:81:97:90:1b:51:23:47:0f:bd:ea:5b:
77:18:ac:64:6d:52:e9:15:ab:42:6f:dc:3c:fd:fe:
16:47:c8:49:d7:6a:5e:25:fe:8a:02:48:3e:b7:8d:
dd:ff:ce:a0:73:fb:04:fe:d2:d7:e1:82:25:11:0b:
d0:06:d6:ed:b6:8a:0d:cc:25:85:95:03:a9:3a:b3:
29:c3:da:4d:0e:17:90:41:cd:2c:d6:c8:2e:7b:2d:
9b:db:51:39:7e:89:3c:e5:9a:95:93:f2:b6:25:31:
ea:5e:4f:fc:61:71:da:fe:61:4b:cf:bc:90:e0:22:
84:8a:ce:dd:2e:cf:03:72:e5:45:f8:3e:82:19:2c:
26:50:da:bd:b8:ec:07:4c:a2:0a:c7:b5:b7:f7:d1:
bf:b3:bd:65:15:87:dd:ed:2c:bb:55:63:21:4a:66:
7e:19:40:0b:34:4b:62:6c:d9:d3:02:af:9c:aa:6c:
80:3e:dc:7c:57:cb:e9:b9:30:84:64:6a:08:a8:a4:
06:59:fa:8d:b4:2e:bd:7e:a6:76:2c:50:7b:3e:57:
c3:86:9f:08:df:eb:99:6b:a4:fc:17:96:93:d8:1e:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:93:D7:B7:5C:71:EC:15:BF:C8:88:D3:9C:60:04:C1:B2:B6:34:43
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:fa:9c:50:bd:3e:8e:80:7e:6a:fa:79:d2:07:af:7a:f3:
02:b9:ed:3b:ae:17:0d:25:06:cd:3f:d8:d1:22:f3:6a:94:55:
8c:c0:70:80:37:eb:22:81:cf:57:4e:59:c6:81:d7:32:b2:8d:
51:f6:7d:9c:d4:5d:ad:78:fa:fa:b4:e2:8b:52:45:ee:7f:88:
1e:2f:38:01:8e:dd:e5:66:c9:e8:61:ee:aa:5f:02:6f:d4:de:
07:a3:87:cd:b2:32:9b:73:0e:b7:8f:62:d0:25:23:7e:12:20:
bc:87:d3:d5:93:c6:48:bd:0c:14:9b:80:df:73:75:97:05:02:
ac:f0:74:98:50:17:88:6a:fd:b7:01:99:f8:13:00:42:f6:66:
0a:01:71:e5:96:a5:01:17:4b:2b:64:29:be:d7:33:9f:f0:50:
8e:09:ac:3d:e7:d2:bc:fe:f3:35:58:61:7b:02:48:5d:98:dc:
14:8f:b3:27:4e:ee:86:6e:eb:b9:c5:24:32:b3:f6:d1:1a:ee:
12:4d:9d:bb:c6:d4:04:bc:a5:9c:f2:cd:91:92:f6:12:45:6b:
5c:49:29:d0:6e:0c:68:33:68:95:1b:57:7d:07:77:77:58:5a:
0e:67:7b:ac:5a:60:5c:4b:cb:09:d7:65:9b:65:25:50:f5:ae:
b8:db:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:58 2025 by rpki-client