Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: sLtRZQnv/IgBu3grsDFOtr5Kf8558HpWll883/kDrno=
Subject key identifier: BD:40:45:FF:55:6B:B1:15:89:49:86:06:2C:AB:65:79:F3:93:31:F4
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 019854FC6E158C3C6CAF7249FD18D955C8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 07:01:26 +0000
Manifest this update: Tue 29 Jul 2025 07:01:26 +0000
Manifest next update: Wed 30 Jul 2025 07:01:26 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: yoDIzOEKHW1zMyUcN0ZDfS5sa3NYaRhBs2ALMlPMBkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:6e:15:8c:3c:6c:af:72:49:fd:18:d9:55:c8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Jul 29 07:01:26 2025 GMT
Not After : Jul 30 07:01:26 2025 GMT
Subject: CN=bd4045ff556bb115894986062cab6579f39331f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:12:e3:ec:88:7d:c3:44:5a:44:c3:fb:2d:
d3:6f:2a:c3:43:19:58:a8:07:5d:60:7f:7f:2e:00:
db:12:b3:ca:03:68:70:b9:e7:92:8b:03:bd:d7:f2:
d6:aa:25:c5:34:68:ed:67:07:b3:41:6d:dd:0e:09:
7b:c8:b8:02:ab:63:27:84:fc:49:94:77:32:6a:90:
f8:fa:ba:44:b6:2e:eb:57:73:5e:e2:34:2d:75:2d:
4e:5b:ee:fb:52:30:53:25:8b:9e:dc:bc:c7:58:86:
25:51:73:ef:dc:cd:24:bb:37:cb:9c:e0:e2:32:46:
ff:2d:bf:ec:91:37:db:61:22:3e:d5:cf:b4:28:89:
43:17:86:8b:81:70:c5:d5:42:61:0c:f2:24:ed:b5:
cc:14:c4:55:15:87:81:18:6c:32:4b:77:34:94:80:
7b:a9:7c:9e:4f:81:cb:ac:f9:f6:5a:d0:9c:92:68:
b8:95:cd:aa:79:50:cc:3a:0a:07:30:f3:09:e8:b0:
33:9b:36:a9:a8:68:c3:37:97:ba:b4:7d:2e:05:e9:
b4:40:5b:d3:47:16:1f:4c:03:39:78:1b:1c:d3:1f:
6d:6a:0c:df:8c:f5:65:30:18:bd:2f:89:0e:a8:56:
c9:cf:0e:c1:c9:db:71:54:26:3d:6f:45:2a:90:60:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:45:FF:55:6B:B1:15:89:49:86:06:2C:AB:65:79:F3:93:31:F4
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:74:8b:09:a0:db:ab:6e:7b:9d:46:a2:c4:d1:ea:ae:2e:
53:8e:64:42:16:eb:90:d9:62:25:98:98:78:5b:73:fe:19:91:
73:6b:89:16:f6:a1:0b:75:94:fb:a2:5a:b1:8a:53:99:82:f1:
94:91:ea:1e:67:8a:82:16:85:0a:f7:34:fe:86:21:2a:35:b0:
ec:85:4f:68:ee:c7:0c:aa:84:0a:95:56:a7:cc:40:80:82:4f:
68:e4:50:6b:7d:ba:e5:fd:0e:de:87:73:61:1e:39:fd:10:cb:
c2:22:a4:7e:c7:70:01:80:1a:21:c4:38:89:f8:34:7d:02:72:
1b:36:e8:93:36:5b:a3:b8:35:ec:d4:6d:99:43:1a:ef:4a:99:
83:dc:cd:44:f2:22:ec:1d:6c:ff:20:f7:f8:86:e7:bb:74:12:
36:8d:47:d1:67:14:46:60:94:7f:f6:3f:86:ac:be:34:56:de:
b7:71:84:78:2a:c6:23:d1:4e:6f:c9:d4:a5:e5:cd:d9:85:4d:
c4:b4:59:07:f7:e7:cc:bc:f8:9a:72:a7:b9:52:67:79:9c:b3:
ec:9c:67:24:eb:2b:5a:6b:46:cf:13:59:fb:a0:a5:94:bf:2e:
83:d7:9d:25:36:f2:9a:e1:2f:7f:31:f9:09:aa:59:63:55:f3:
dc:3c:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:37 2025 by rpki-client