Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: 6f1piqmhVZSRwxnOWGQaLnjGWhUxpoQzX5aht8HRAvA=
Subject key identifier: 72:DB:AD:9A:ED:84:95:5F:54:A1:B0:92:A8:AB:34:11:97:E5:45:5F
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 0198492E2587B330E0CAE2310F38C7240B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 0600
Signing time: Sun 27 Jul 2025 00:00:17 +0000
Manifest this update: Sun 27 Jul 2025 00:00:17 +0000
Manifest next update: Mon 28 Jul 2025 00:00:17 +0000
Files and hashes: 1: IHXYDkNdyuxVlHnKdqeJFgziykU.roa (hash: aJSFd7Y5Cfk1lssKehUH+OVrEIXrA/vmftp7TGe0ykk=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: fqUkzav6rUjdEqQV5brAqKhrIwUdrM7Nudba2R1lWDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:25:87:b3:30:e0:ca:e2:31:0f:38:c7:24:0b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Jul 27 00:00:17 2025 GMT
Not After : Jul 28 00:00:17 2025 GMT
Subject: CN=72dbad9aed84955f54a1b092a8ab341197e5455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:76:1d:cc:2a:ad:bd:63:c3:54:6e:d9:d6:
e1:87:1e:96:60:27:eb:c9:e9:89:45:e2:73:a2:1b:
1c:0f:dc:be:94:a8:c0:ce:86:01:9a:46:b7:45:91:
10:7d:2f:bb:91:12:a4:b4:db:8f:c3:8b:e4:ff:1b:
3c:63:56:33:58:3e:b6:31:65:69:36:81:86:85:5b:
27:1a:ec:b3:2d:36:cc:c9:f7:80:c9:82:e0:1a:95:
96:89:66:42:12:52:31:5b:dc:01:ab:0a:68:32:1d:
c2:4f:17:f0:18:57:ee:84:95:88:26:95:82:f3:ea:
2d:c2:57:13:b4:e3:e2:9b:1c:6e:c5:d2:65:a7:51:
73:f0:0b:27:72:19:27:43:bd:b1:16:5e:43:1c:1b:
33:dc:2a:83:60:05:a2:d6:03:17:78:b6:46:b4:80:
70:9b:a1:f7:fe:bc:a3:ee:0f:15:cc:61:6d:bf:e5:
64:1a:21:c7:d3:0e:17:fe:b6:e9:8e:10:06:f7:99:
07:db:73:19:36:e5:fa:4b:04:26:40:2b:cb:b9:d1:
76:0b:c7:9e:2b:c4:bd:7e:17:96:f6:d2:40:0b:0e:
75:e4:e8:63:8b:6c:57:64:85:9e:82:aa:3d:17:1b:
8b:24:d3:91:fb:06:6b:6c:56:5d:5b:7b:dc:3f:2d:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:AD:9A:ED:84:95:5F:54:A1:B0:92:A8:AB:34:11:97:E5:45:5F
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:30:c5:be:72:7f:18:86:c4:d1:27:13:0d:d8:e5:78:24:
9f:2d:07:13:ab:c7:b3:d3:5b:6e:80:6a:45:67:57:46:ea:8c:
7b:f0:f1:ee:4a:63:bd:9f:6a:48:96:f8:3a:c6:15:75:14:47:
6b:db:c7:c4:59:ec:80:a4:26:ec:dc:3a:e3:03:c2:9d:47:76:
4b:b8:22:1a:05:27:50:8f:11:02:47:37:da:c0:fd:01:14:3b:
6c:7b:a0:2d:e2:6f:f1:96:07:19:ca:71:6c:7e:ed:9c:30:b5:
d7:4a:f9:06:69:97:ed:22:8e:8a:fd:55:9a:b2:b2:18:b6:1e:
bd:67:35:40:4f:74:e7:a8:af:63:1d:10:36:e6:83:e9:e9:41:
51:85:3d:1c:ad:0d:c6:37:78:c1:36:45:09:cb:65:36:0b:1b:
34:68:1a:6b:b5:8a:5f:74:68:39:65:2a:72:a9:9b:ec:8e:69:
5e:6b:50:3a:c0:6f:01:ee:b6:06:57:f5:6a:20:32:40:1b:2f:
33:50:c6:09:02:94:5b:01:9f:05:1a:3f:c4:9a:08:0b:f3:a9:
51:61:9b:ef:15:f7:50:e2:d9:bd:78:7e:c2:73:4d:bd:db:49:
b8:2a:64:b4:3a:87:ea:c1:bf:19:a5:86:2f:ba:26:90:4e:e3:
15:99:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:49 2025 by rpki-client