Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: SKu5PNB3w4DYaPwdSUbN/PjYshjS1Pr3E/hy8syGTx4=
Subject key identifier: 68:90:B7:85:EE:E9:D7:33:C4:C1:5A:2F:84:AB:99:EB:42:E7:9F:6F
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 01984E1DAD090271BFB4A0E74F5A7AB45A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 088F
Signing time: Sun 27 Jul 2025 23:00:24 +0000
Manifest this update: Sun 27 Jul 2025 23:00:24 +0000
Manifest next update: Mon 28 Jul 2025 23:00:24 +0000
Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: 8sGaJWRhw1f/5Fgw70dF78EC7gUBovB4FTPF0cKXkqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1d:ad:09:02:71:bf:b4:a0:e7:4f:5a:7a:b4:5a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Jul 27 23:00:24 2025 GMT
Not After : Jul 28 23:00:24 2025 GMT
Subject: CN=6890b785eee9d733c4c15a2f84ab99eb42e79f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:59:07:5b:d5:d6:d4:55:cb:ad:f1:4d:ac:
0a:bd:7a:f3:45:3c:91:22:6a:a6:6c:bd:21:46:7b:
57:cb:ae:c5:29:5d:5b:47:de:cd:83:a9:d0:8b:28:
77:b7:69:84:47:b1:56:74:39:d5:1a:e9:25:af:61:
49:06:d8:9c:db:18:93:f8:25:cf:55:46:66:9d:e4:
4b:b5:fd:00:86:37:b2:27:4d:0f:00:f4:50:ce:53:
ed:a6:6e:21:8c:98:93:89:c2:99:dd:f1:36:3d:94:
df:09:d3:2d:ff:89:29:74:17:af:7c:0e:8a:d5:67:
70:e9:ba:e0:9c:1f:3d:bb:f1:b1:9b:21:89:3a:b5:
49:21:52:0c:e9:1d:0c:c4:0b:75:22:60:4b:f0:00:
3f:8b:78:02:71:e2:5b:8f:2f:0a:3d:d4:89:d8:8b:
53:90:ae:28:f9:ec:1e:b9:ed:22:01:97:98:37:43:
d7:5f:e3:d9:90:3e:9e:4d:6d:1b:e8:de:09:21:7a:
01:c7:84:49:3f:1c:c7:3f:0b:54:14:5a:56:f4:f3:
c3:6a:67:55:22:f7:ba:a7:b9:30:13:ce:2a:0b:bb:
8a:ef:4c:51:c0:36:07:e6:28:3b:62:57:5d:a9:1e:
84:66:b1:f1:a4:83:fb:5c:d9:0d:f4:59:aa:e5:0d:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:B7:85:EE:E9:D7:33:C4:C1:5A:2F:84:AB:99:EB:42:E7:9F:6F
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:73:69:f3:2f:45:71:b7:fa:05:cf:91:c3:a4:cc:ea:42:75:
6e:7e:a3:dc:65:03:9a:fd:7e:28:a1:b2:3e:21:60:0b:54:1e:
b5:0f:a6:ba:f1:56:78:c2:bd:6a:5b:47:37:ea:1d:13:ab:f7:
36:ba:be:c6:ee:ef:8e:a5:55:98:fc:21:8a:51:a6:51:9a:e2:
75:84:99:1f:37:3c:78:1d:25:d9:23:15:af:13:61:81:af:41:
04:1f:0d:6a:4e:c2:91:a2:6d:9d:46:3a:95:cc:93:2e:3d:20:
fe:e2:73:5e:09:e3:99:9a:d2:15:a0:03:74:6c:b0:c8:02:2b:
36:02:81:74:51:2c:7f:43:0d:40:57:7b:b0:ed:26:8f:8d:47:
87:d3:36:d4:58:bd:2e:3b:a1:c0:8e:eb:3a:30:49:d0:c8:77:
11:48:30:03:45:53:48:71:8f:18:ad:e0:13:2a:78:4a:8a:c6:
de:56:81:d1:3c:ea:7d:bc:8f:fe:cf:54:c4:be:98:7e:fa:9d:
93:78:dc:5b:22:65:3c:62:47:25:dd:d7:fa:b1:e9:8c:7f:2a:
79:45:39:cd:bf:11:e5:a7:cf:5a:b6:07:95:09:8f:68:85:62:
dc:bc:8b:f4:1b:ed:f8:75:eb:39:b8:3a:f1:9f:e8:76:71:3c:
76:bd:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 08:41:18 2025 by rpki-client