Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: LLebRfweKSXeeOwQu+aawUmZr7E5rL3p5FXi3TxDuwg=
Subject key identifier: F1:E9:87:63:9D:04:85:94:55:DD:C6:3A:3B:9D:DA:46:51:35:EA:A2
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01984AAF233FB728428542C18CD17C73D0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1228
Signing time: Sun 27 Jul 2025 07:00:48 +0000
Manifest this update: Sun 27 Jul 2025 07:00:48 +0000
Manifest next update: Mon 28 Jul 2025 07:00:48 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: iJYenl5oHmyUu1Hf4H7MDj37KwI3Wing5IjGQvmsEWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:23:3f:b7:28:42:85:42:c1:8c:d1:7c:73:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jul 27 07:00:48 2025 GMT
Not After : Jul 28 07:00:48 2025 GMT
Subject: CN=f1e987639d04859455ddc63a3b9dda465135eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:37:1e:b1:7e:ac:19:b8:c4:4d:93:8e:03:
37:51:50:54:20:6b:18:d2:30:cd:ce:02:26:54:89:
90:63:fd:e9:6c:2c:ab:8b:87:fa:f0:30:da:2f:ce:
f5:e1:d4:a9:14:f9:19:9c:38:d0:be:f0:2d:e6:5d:
ac:a3:9f:36:bb:3c:bf:a8:1f:57:40:ae:e8:c6:b5:
e3:94:2d:98:95:49:f4:03:32:58:96:09:e7:de:12:
34:30:b9:98:90:cf:d1:16:0a:4f:09:c5:dd:46:3e:
2f:1b:a6:19:62:75:dd:5f:f5:a8:ea:53:4d:6b:62:
6f:ec:49:b4:06:1c:7f:e7:9e:36:ab:7a:15:79:a2:
ef:54:18:1d:0e:c2:d8:99:3e:32:53:cc:00:aa:5a:
6f:0e:2c:2c:1c:7d:34:3c:10:03:8f:c3:a6:00:94:
c6:6f:da:34:e5:2b:48:82:71:ed:cf:fa:2c:90:b2:
2f:a5:f5:b8:d2:1d:de:f1:70:1d:4d:ac:7a:c5:3b:
aa:e8:9d:0d:b7:1f:a8:84:b5:77:18:6c:92:9e:24:
a6:39:32:e3:c7:04:3d:fa:c4:12:0d:33:58:ad:6b:
53:19:73:ce:7b:86:89:aa:59:58:a0:01:8c:ec:46:
05:5c:2f:3d:d9:5f:74:ed:25:1b:81:b7:34:5c:0d:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:87:63:9D:04:85:94:55:DD:C6:3A:3B:9D:DA:46:51:35:EA:A2
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:72:7c:2b:b4:39:36:38:18:c9:ec:7f:36:fe:af:52:23:e5:
52:85:99:fe:d7:84:67:5b:46:37:86:19:85:18:75:d2:2a:09:
09:b1:df:16:72:2c:be:6d:fc:ac:46:b3:29:4a:c4:ac:d8:ef:
e0:22:bf:45:01:67:31:6b:8d:6f:6d:28:72:55:a3:d8:ab:9b:
f1:d1:8b:36:bf:a0:3e:00:fe:e6:47:88:4a:e8:ad:7d:65:05:
b7:c2:af:7c:d9:df:55:21:f2:8c:05:85:07:da:11:09:e0:d1:
08:30:80:70:a6:a8:26:e3:0e:5e:4a:03:9f:6e:82:3a:75:7f:
33:20:8a:43:53:0d:d4:bd:58:d5:1f:ce:00:fe:56:86:a0:ca:
ee:76:9c:59:60:d8:17:c3:d6:fe:dd:59:0c:e1:0c:d0:49:67:
00:3f:f7:e9:c3:b9:7e:8a:06:51:9c:be:5f:88:62:25:c2:78:
1c:82:2e:7e:d9:ca:b8:35:18:ef:ce:3a:b1:32:ea:9e:82:3b:
17:53:f9:e5:2c:d8:c5:02:c2:9f:5f:02:d2:9d:90:27:da:9e:
bc:e3:49:be:0d:a2:fb:93:69:85:f4:74:6d:1e:44:d0:7d:be:
5d:c4:29:f6:db:d6:c2:48:77:84:1c:21:70:3e:ac:bb:89:33:
d0:19:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:40 2025 by rpki-client