Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: ggGutMm4BS1/ONYTIsRroJL8NW4LrOsoMcjwRbTDxjU=
Subject key identifier: 85:8D:C1:14:5A:7E:A2:36:5A:3B:45:09:E5:E3:83:42:A9:D6:F8:46
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 01984B5432F8D0EC9360AF3BA093706897B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0BE6
Signing time: Sun 27 Jul 2025 10:01:05 +0000
Manifest this update: Sun 27 Jul 2025 10:01:05 +0000
Manifest next update: Mon 28 Jul 2025 10:01:05 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: CBvMadzhotb00bySlnFyrfqJQ/RQQkCgUy1MRGe9L3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:32:f8:d0:ec:93:60:af:3b:a0:93:70:68:97:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Jul 27 10:01:05 2025 GMT
Not After : Jul 28 10:01:05 2025 GMT
Subject: CN=858dc1145a7ea2365a3b4509e5e38342a9d6f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:97:2c:b1:56:09:ff:bc:00:03:61:f3:e5:
bf:44:cc:78:46:fc:da:51:d2:5b:25:c1:3f:84:48:
7b:33:52:11:dc:de:05:28:cb:e6:49:52:eb:88:b0:
4c:e6:11:20:a6:17:8a:f4:54:75:bb:1c:e3:00:0c:
c4:95:d4:31:cb:67:d6:14:29:1d:f5:fa:c0:81:90:
7c:fc:e2:39:11:a3:6d:b7:87:23:d2:da:f4:df:3b:
83:9b:33:f3:07:dd:c7:79:6a:77:35:7c:90:ad:cf:
8c:48:4a:1f:b9:55:98:89:68:1f:ec:68:4a:18:e7:
c7:cf:91:57:0d:7a:e2:ea:af:96:4d:e3:c6:91:12:
9e:8e:64:59:a9:08:e1:d3:5f:62:25:77:13:26:13:
3c:7a:22:28:31:4d:e1:bf:c9:54:b4:28:86:4b:5b:
55:79:53:67:30:96:22:90:1b:2a:28:d5:53:42:a8:
39:62:ac:39:ed:a5:12:46:ab:15:6d:32:03:e3:6f:
75:c9:a0:64:5b:27:d2:d5:49:d3:10:f6:60:ce:ff:
01:99:b2:3e:63:80:6a:80:58:5d:59:3d:b8:3b:ac:
7c:a6:3b:d3:d8:3f:b5:a9:cc:73:93:ba:df:de:d4:
3b:6a:03:65:f6:b7:0b:ae:e6:f8:b0:be:4a:d7:06:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:C1:14:5A:7E:A2:36:5A:3B:45:09:E5:E3:83:42:A9:D6:F8:46
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:32:a1:3b:d1:e2:e2:fe:7a:f8:94:ae:82:69:08:fb:45:f3:
23:b1:76:2c:76:d6:57:ad:90:5c:ab:8f:1a:f0:72:98:fd:16:
56:cc:01:ce:74:9d:5b:1e:b9:a8:93:32:49:e8:bf:bc:89:87:
2c:ea:dd:8a:9a:8b:40:96:da:7d:4f:a0:9a:5d:77:e9:60:6e:
e6:ba:2c:c2:0f:6d:13:33:b3:37:24:09:15:29:aa:6b:b1:47:
07:25:c5:76:1a:e9:d6:1d:e3:f3:cd:eb:cf:8e:9d:d9:b3:3b:
58:25:f1:14:4d:f5:68:50:de:d9:ee:ec:86:1e:30:75:b4:d3:
cd:9d:59:64:f8:59:a6:53:62:ea:cc:14:bf:dc:8a:b5:9c:2d:
26:4f:4c:67:9d:28:3a:2a:84:2b:76:96:d5:e6:fb:54:92:ce:
67:c2:d2:df:4d:43:e8:ea:18:8d:ee:84:08:cd:46:fb:a7:96:
47:b3:c5:df:18:ea:20:92:a5:da:ef:97:8c:58:53:c9:40:26:
59:6f:6b:b5:b7:07:b2:45:ac:22:e1:b3:4d:79:92:98:15:e0:
b1:dd:71:95:33:72:ba:1c:02:41:c3:5a:64:c8:69:b0:80:37:
f1:93:32:83:05:9f:ae:21:4b:fd:1f:be:d5:b1:50:d3:76:7a:
b1:2e:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:49 2025 by rpki-client