Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: 55W/hzatnBBuwAKh6JbMazZe+tNHi7l6fnqXnmoPat4=
Subject key identifier: FB:D6:44:35:26:64:69:7D:01:13:6A:63:C6:E4:5F:8E:BA:99:E6:25
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 0198481B9582F9B275AAD8849ADCFBC7DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0994
Signing time: Sat 26 Jul 2025 19:00:23 +0000
Manifest this update: Sat 26 Jul 2025 19:00:23 +0000
Manifest next update: Sun 27 Jul 2025 19:00:23 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: YV5bsmeg6fYG/HFjVcl9GXKHFzFcJdbyPqrvuJzxoXE=)
2: lgcKgcRNJg401G2YURIZe_B5NuU.roa (hash: uy67hQlFG6+Rikv9aAochHvjUmoKf+eqiNInXnUkhzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:95:82:f9:b2:75:aa:d8:84:9a:dc:fb:c7:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Jul 26 19:00:23 2025 GMT
Not After : Jul 27 19:00:23 2025 GMT
Subject: CN=fbd644352664697d01136a63c6e45f8eba99e625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:31:78:b6:cd:a8:09:7c:45:2a:c6:4a:61:
fe:9e:83:d8:10:b7:f2:63:c5:48:1e:ce:93:9b:db:
be:10:8e:f9:df:ff:59:e1:90:0d:d3:4b:0e:90:fa:
6f:b6:7d:0e:a4:e5:c5:b4:b0:47:44:68:4b:1b:6f:
12:f4:8a:54:63:61:ea:93:6e:cd:eb:82:eb:4a:d3:
97:91:9b:5d:ef:71:7c:41:97:02:1a:71:aa:17:9a:
b6:32:0a:bc:ee:21:3f:ec:7d:23:57:3e:b6:bd:39:
76:1c:16:c3:17:5a:26:ea:fc:01:27:7a:b7:22:7e:
66:7d:9b:91:36:5e:c8:6d:7a:08:23:77:35:dd:f6:
50:0b:3e:be:a4:a4:61:b9:5f:57:87:f1:8e:ae:8a:
c2:84:96:d0:cd:e6:75:ea:bb:36:5e:0c:44:91:b2:
de:01:52:18:aa:4a:d5:d5:79:cf:c1:75:59:97:b8:
f9:f2:73:7e:38:ec:08:c3:28:66:63:f1:d9:99:dd:
2b:6e:fc:d3:03:21:f1:3a:f8:ac:51:3a:6d:a0:25:
cd:88:75:e1:33:bd:e4:d1:c8:b4:c2:fc:39:f4:3a:
a7:15:82:af:b8:f1:62:11:c7:6c:db:b6:75:11:1a:
43:4f:e8:d3:be:fb:ad:68:34:9d:39:ae:35:ad:7a:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D6:44:35:26:64:69:7D:01:13:6A:63:C6:E4:5F:8E:BA:99:E6:25
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:b3:95:09:3a:2d:a6:e7:c7:2d:40:a8:51:d4:8c:e0:72:
ae:c9:20:78:e4:36:77:78:3b:88:2d:a6:a3:7e:25:82:5c:16:
18:17:40:65:79:c2:53:b7:51:3f:0f:6c:77:3b:06:1c:df:02:
a8:86:c2:7e:12:b1:51:27:3e:46:e5:5a:af:13:e4:aa:6b:ae:
17:0c:e6:71:43:16:12:6e:e1:81:ed:bb:c6:99:7c:8c:05:33:
01:fd:29:6c:59:e2:ac:76:fd:a2:99:d9:23:be:cd:1b:4a:39:
b9:c1:a1:6d:4f:75:39:cd:ff:c8:62:07:83:bb:09:1b:40:81:
00:ac:59:61:73:49:56:c2:bf:9f:7f:52:7b:e3:79:4e:03:54:
20:11:f0:c1:6f:e3:b9:e4:2c:9e:14:8b:85:bd:ab:62:ba:8e:
69:ee:64:21:e5:4f:7c:0f:59:f2:bd:c4:5c:0f:5b:37:28:80:
69:ff:de:d0:00:02:95:8f:4b:6f:3e:73:39:25:a2:1b:d1:83:
58:24:d5:aa:b9:19:b1:18:e0:c6:38:61:a3:87:f9:eb:c4:e0:
33:9e:c5:dd:c4:86:51:a1:c4:32:dd:a6:ba:c0:f4:cd:a0:f2:
d1:ad:7e:bd:98:84:88:00:50:69:38:03:28:10:d6:b2:2b:44:
0b:3d:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:00:36 2025 by rpki-client