Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: brZ4yJ3bAz5F+snaLyKwQNUNPob6LhuooBIJWHONMR0=
Subject key identifier: 04:A0:8C:9B:EC:04:26:A9:8B:8F:D7:6B:3E:F4:2A:17:CD:4A:04:DA
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 01984777DD2773AB8F9C2779DA573131E69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 14FE
Signing time: Sat 26 Jul 2025 16:01:34 +0000
Manifest this update: Sat 26 Jul 2025 16:01:34 +0000
Manifest next update: Sun 27 Jul 2025 16:01:34 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: pN5qcnPMMPBmD4o2TSdsobtKora/QAlr9GA1VN5pyno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:dd:27:73:ab:8f:9c:27:79:da:57:31:31:e6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Jul 26 16:01:34 2025 GMT
Not After : Jul 27 16:01:34 2025 GMT
Subject: CN=04a08c9bec0426a98b8fd76b3ef42a17cd4a04da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:1a:03:99:37:3f:2d:d0:41:c3:54:07:55:
8c:b0:20:bc:4f:07:b5:ed:60:ef:01:11:39:34:8b:
f9:40:09:38:77:53:1a:54:b8:ba:27:58:bd:54:ba:
af:33:77:ea:7e:0b:18:3e:88:b1:02:1b:1d:73:16:
57:39:84:a6:09:71:ba:3d:77:18:41:1c:28:c8:71:
f8:92:5b:d0:aa:a6:44:25:c1:b2:0e:82:83:6a:22:
10:41:4d:f3:3d:ba:e0:0f:ed:fd:a3:dc:b1:09:0f:
a6:f7:a2:e5:6d:13:09:67:10:87:81:1d:8a:87:b9:
f0:e9:6b:ab:e8:ae:38:fb:77:3a:23:6a:b0:0d:1a:
1e:3d:73:b3:07:6b:af:2b:7e:46:12:b5:ef:53:ca:
f0:5a:13:12:2e:b7:63:5d:7d:05:c1:9d:97:67:df:
54:d9:32:51:7e:3e:e9:05:d7:04:d4:da:dc:87:a5:
48:ab:c1:d5:b2:53:49:34:3b:20:22:3b:12:a1:db:
6b:2c:38:de:d9:30:d2:f7:27:25:3e:b3:ed:f2:20:
81:86:d9:ed:27:c6:00:1e:39:f7:2d:ac:ce:f3:c1:
43:73:cf:53:05:0c:0c:7a:5b:23:a7:b3:dd:fc:89:
e2:ff:82:cf:f9:f5:8c:4e:8e:f9:e8:bc:47:ef:49:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:8C:9B:EC:04:26:A9:8B:8F:D7:6B:3E:F4:2A:17:CD:4A:04:DA
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2b:21:b5:13:30:cc:10:96:51:ed:fd:87:af:69:fd:33:68:
99:8a:79:a0:df:16:6f:10:0a:b1:2a:58:1a:e0:5f:52:ae:83:
a6:03:26:3b:28:32:cb:19:56:af:86:b0:26:82:e0:2e:fc:88:
c1:e2:9a:4f:f5:6b:72:a7:09:2b:78:b7:ed:39:6a:02:f8:48:
22:37:69:c6:46:6e:e2:ca:c3:d0:3a:bd:1d:99:92:76:bd:f8:
9a:67:74:9a:cc:d8:9b:1f:3f:be:aa:d1:fb:ab:ec:94:a1:d8:
49:e3:1d:01:2a:2e:b5:88:c8:c2:61:66:96:75:89:79:98:67:
fe:a3:b3:e6:80:2f:96:e4:e5:43:f1:d4:5c:8a:23:0e:c7:d9:
56:83:38:28:db:7f:dd:05:7e:83:3e:a6:1a:2f:ff:64:a8:db:
63:5c:ef:12:9d:c1:af:b3:92:cc:7c:31:a5:7a:3e:30:b8:27:
24:bb:8f:7e:06:61:dc:8c:c3:88:92:9a:48:16:88:3d:aa:47:
4d:98:d2:2b:eb:59:69:22:df:a0:f9:a2:d5:95:e3:51:b6:97:
01:5d:8f:81:ee:45:bf:5b:1e:ef:9f:ad:e4:46:09:c9:a2:9b:
25:52:ea:fc:1f:6b:94:e5:68:5b:06:3b:28:1e:b8:2a:1c:9a:
0c:7f:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:06:00 2025 by rpki-client