Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: rx/V3TjQ8U8L0Hjp5vdTmouyGjfncPb++iqyUgOwF6s=
Subject key identifier: 70:77:91:01:B2:84:B7:4B:27:3B:EB:86:CB:F7:F1:06:AA:BD:78:DF
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0198432C670273110FC2465A208AA0B0DA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0EF4
Signing time: Fri 25 Jul 2025 20:00:40 +0000
Manifest this update: Fri 25 Jul 2025 20:00:40 +0000
Manifest next update: Sat 26 Jul 2025 20:00:40 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: orz7MOW5YWkcGwkxJhyv5oua9UVqK1X3fjQY83l3FM0=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:67:02:73:11:0f:c2:46:5a:20:8a:a0:b0:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Jul 25 20:00:40 2025 GMT
Not After : Jul 26 20:00:40 2025 GMT
Subject: CN=70779101b284b74b273beb86cbf7f106aabd78df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:be:f8:7f:8a:5c:eb:fe:24:b8:50:8f:8d:
36:76:95:6a:5e:90:64:74:fe:63:8b:2f:4e:99:ec:
e7:22:97:ea:c3:61:a9:84:54:f9:9e:de:62:7d:1d:
b6:97:19:71:5b:5f:24:ec:f5:9d:cc:cf:be:fc:3b:
c5:cd:b6:95:10:06:3c:5d:44:53:93:7e:a7:6a:40:
83:58:f5:fd:cb:98:6e:48:4f:5e:41:48:70:61:64:
bc:1b:b0:ba:a0:04:79:68:a3:97:51:64:58:28:c6:
49:d4:56:b0:94:81:3a:3b:6b:44:7e:a1:55:fa:f8:
3f:b5:47:4a:39:e9:6c:ad:5a:fb:df:c3:51:e8:ce:
fa:ec:5e:c1:82:2d:55:7e:bb:f9:6d:cc:6f:da:57:
a2:87:ee:c8:7f:68:dc:dc:14:51:e2:52:8f:44:e3:
00:93:a5:23:43:f5:48:8a:9b:ca:c2:c3:a9:69:7e:
79:68:97:77:dd:98:b8:95:54:57:51:ca:0b:76:10:
75:18:41:94:5a:70:c2:50:e7:7d:6a:27:f0:70:14:
36:02:e3:e7:68:3e:c8:19:7e:2a:45:63:89:ad:fc:
34:ab:72:2c:8c:ff:e3:53:ba:6c:ca:59:53:b3:50:
c8:47:76:5f:9d:04:61:8d:e4:b7:37:78:28:dc:7e:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:91:01:B2:84:B7:4B:27:3B:EB:86:CB:F7:F1:06:AA:BD:78:DF
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:40:cb:97:f0:7a:66:de:94:62:e5:c6:9e:c0:f1:c4:d2:86:
01:2e:89:68:ec:13:a6:11:dd:1a:3b:ec:59:2a:ef:f5:ea:3d:
da:7c:6d:47:a6:67:a8:de:2c:66:ed:b2:53:9a:f5:ed:61:17:
23:bd:47:67:cb:bf:1b:98:5c:a6:b6:c2:69:f4:ae:c3:29:e2:
ee:2e:86:79:7a:5d:6c:3f:55:d7:84:94:3f:e8:f9:ef:b9:b8:
9d:74:48:59:00:60:9e:1d:4c:94:9d:29:3b:be:8c:9c:08:33:
24:29:0a:e6:02:7d:90:28:5c:c0:e4:a7:07:41:1b:c1:11:f3:
58:6e:be:64:bd:c1:b9:5c:27:e0:78:3d:96:53:a0:10:9f:8d:
5f:5c:10:62:42:bd:ba:1b:7b:62:ea:66:fa:19:7d:42:98:6b:
16:e0:dc:54:08:0f:c8:02:4c:7c:b2:17:19:62:5f:1e:58:ca:
1c:a8:93:14:c2:58:c2:34:7a:2e:2e:df:72:00:6a:ee:48:80:
0c:0c:39:7b:43:46:99:b0:62:9c:82:60:af:e3:e3:6a:c3:ee:
6c:25:78:f6:27:cc:aa:74:8b:0e:c9:9c:dc:36:a1:3c:82:9a:
e5:0f:5c:11:b3:22:3b:5d:27:90:ec:39:98:81:6a:5d:1f:4b:
a8:cd:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:30:50 2025 by rpki-client