Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: 1JPoTx+cjHs2tmf6jObTHZXIX7msXFFjcgevnNZd5fE=
Subject key identifier: 9F:B7:11:CE:17:D5:F4:A7:8C:D1:AF:DA:5D:F6:69:D2:23:B1:95:75
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 019827EC9CBC10AE48095A9F25F0A1FC7A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 0789
Signing time: Sun 20 Jul 2025 13:01:14 +0000
Manifest this update: Sun 20 Jul 2025 13:01:14 +0000
Manifest next update: Mon 21 Jul 2025 13:01:14 +0000
Files and hashes: 1: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: 0K67gcDed64bsSlW/UDfonaFkUWW0qVkYv/HjTiZl5g=)
2: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
3: sExC59C2viDQKDDYj8CusH8J5Lg.roa (hash: cOWFAprr/QGP2vQ6eCaPmf7CyWdmOoqQ/ISFnDFZTmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:9c:bc:10:ae:48:09:5a:9f:25:f0:a1:fc:7a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Jul 20 13:01:14 2025 GMT
Not After : Jul 21 13:01:14 2025 GMT
Subject: CN=9fb711ce17d5f4a78cd1afda5df669d223b19575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:81:7c:97:55:f2:31:69:d7:de:87:fa:3e:
8e:d0:3b:b9:1f:52:27:b6:62:98:5d:16:44:14:8b:
9b:2d:8c:17:ea:8f:b7:b6:27:8a:08:e9:e4:63:43:
a6:57:9f:af:60:de:13:ca:e4:b2:65:c3:9f:6c:6b:
67:9b:f8:c5:3c:18:e7:a6:08:97:3c:aa:dc:b8:c4:
81:23:7b:98:d0:ca:75:46:96:b4:9d:fb:94:2b:37:
83:b0:00:a4:ed:c6:88:1a:b4:bb:bf:e0:43:55:10:
49:d4:a9:5f:ab:85:4d:6d:91:ba:32:6a:ca:70:aa:
6d:e8:dd:f5:be:dc:04:f8:41:a6:4e:6f:b8:32:41:
b3:ec:7b:9e:06:a2:30:0d:74:dc:8b:1f:24:12:c8:
99:25:1f:96:f2:91:cf:7a:3e:a1:ee:7f:09:36:3f:
76:bd:7f:85:51:b0:1e:e9:02:6d:de:35:8d:37:e2:
84:50:aa:06:98:50:03:38:6b:19:08:5a:19:55:95:
17:3b:37:f6:3f:80:96:d2:7c:48:2e:e1:31:40:5e:
03:4e:78:e5:d2:92:1c:87:8d:ed:f5:19:b4:21:c2:
05:69:0a:b2:67:93:c6:92:1a:97:36:46:c0:c7:40:
53:f3:55:55:34:05:48:65:52:e0:31:9c:32:c0:8c:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:11:CE:17:D5:F4:A7:8C:D1:AF:DA:5D:F6:69:D2:23:B1:95:75
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d7:f9:22:5c:80:85:f1:a6:ad:0e:3e:4b:99:6c:eb:b2:aa:
3c:d2:84:53:6d:49:bc:ab:e8:1f:49:92:62:43:7c:32:de:3b:
a4:fd:1e:64:0f:f9:5d:0b:0a:95:dd:83:86:19:5c:89:35:2e:
36:40:b3:11:57:b0:00:7f:58:c8:b7:0c:94:1a:c1:5b:9b:18:
77:2f:62:4c:e7:aa:2d:19:b2:da:05:65:e5:36:97:ad:e6:91:
6a:75:2a:91:35:a6:6a:22:0a:63:33:6e:6f:80:cc:0a:dc:7f:
01:09:9a:d7:0e:50:03:37:bd:95:6c:fc:d7:87:aa:0b:0d:91:
b3:7b:1c:a2:83:45:a3:31:13:f7:cf:2e:b0:0d:95:9b:73:49:
02:2f:b1:5c:e8:3a:06:3a:23:03:20:c5:2d:8c:91:ca:b3:bf:
b5:74:e6:8e:44:5d:5d:17:64:77:cd:e0:4b:a1:b9:c4:17:1c:
97:1d:4b:23:9a:1b:e2:50:9a:58:aa:57:02:d3:98:a1:e8:29:
40:d7:4a:9b:93:bf:d8:c0:fb:44:bb:bf:63:67:a5:16:13:2b:
ac:d9:14:3d:a1:dc:7a:52:3a:ac:8b:e0:19:01:7f:7c:5b:7c:
fa:82:b6:e7:4d:04:26:b8:13:0b:8e:c5:e6:4c:19:9c:9e:99:
ce:9f:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:30:07 2025 by rpki-client