Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier: StBZ8n9gy1LdphEjoHPBZXzusJdt/qAV7ST95YY4ewc=
Subject key identifier: 4A:58:1E:04:22:29:A6:77:DA:4F:02:73:86:22:1C:44:EC:25:38:BB
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial: 0198451A67D5551A3CF5C271E9E24253148D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number: 01E4
Signing time: Sat 26 Jul 2025 05:00:14 +0000
Manifest this update: Sat 26 Jul 2025 05:00:14 +0000
Manifest next update: Sun 27 Jul 2025 05:00:14 +0000
Files and hashes: 1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: aI45ZyCUYsJBK+CZtaiNhGwWYN4pjyp/7AaM+2nyhrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:67:d5:55:1a:3c:f5:c2:71:e9:e2:42:53:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
Validity
Not Before: Jul 26 05:00:14 2025 GMT
Not After : Jul 27 05:00:14 2025 GMT
Subject: CN=4a581e042229a677da4f027386221c44ec2538bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:d5:e6:63:cd:ad:06:db:f1:a2:8f:3a:54:
17:52:45:13:47:35:e6:17:05:31:68:14:66:35:c0:
b3:b8:a3:4c:85:25:a3:32:66:8b:72:8b:ec:8a:39:
de:90:25:77:54:1b:b6:be:e1:a7:e7:03:02:a2:20:
99:88:81:09:3e:fd:37:be:b8:26:cc:a2:6a:cb:45:
ec:7d:c3:09:3b:69:f0:5d:b3:b1:96:6c:a6:a1:e3:
45:c8:fa:1b:5d:a1:ed:3a:a6:9f:8f:f8:93:c3:cf:
9f:08:b0:17:bc:29:e9:52:0e:28:e9:68:42:4c:d1:
fc:d7:16:8a:60:92:88:f8:30:43:a6:b4:f8:fc:a0:
5c:6e:d6:3b:74:04:18:ec:f4:66:82:0e:99:06:f3:
73:62:98:f4:0d:8e:b1:b1:33:e8:fd:48:6c:6e:c6:
00:1a:ca:0c:40:71:04:4f:fb:75:97:98:cb:0b:20:
c2:61:02:29:93:fa:cd:61:24:b1:46:da:37:8c:d6:
75:75:1c:5a:c5:f0:83:8a:ca:7a:af:e9:1a:de:a3:
b1:57:6a:99:b5:42:1b:70:fc:c1:11:88:2a:b8:3f:
28:36:e6:60:7c:0c:29:a6:2c:da:02:e8:05:03:ec:
85:5a:d8:3a:17:5d:1c:88:84:5a:40:43:1c:62:e9:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:1E:04:22:29:A6:77:DA:4F:02:73:86:22:1C:44:EC:25:38:BB
X509v3 Authority Key Identifier:
keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7b:a9:d3:88:86:4d:29:17:d4:e4:e3:da:88:ea:b1:f2:e5:
32:bc:aa:6e:3f:1b:2e:e4:5d:ca:20:77:ea:53:c5:1a:45:77:
3e:4e:41:0e:9a:1c:42:2b:bc:25:2a:b6:46:05:98:64:c3:69:
c4:4b:06:0e:92:17:78:05:38:d6:53:21:e0:d1:31:a0:56:3c:
e3:b8:89:28:dc:27:44:2c:b7:81:5f:74:f5:e6:c3:a4:02:9d:
78:22:e0:0e:11:85:db:a9:27:93:e3:d1:eb:67:8d:7d:d6:e1:
49:c5:eb:54:d7:29:c6:08:d8:0c:81:ed:18:c8:40:72:30:04:
fe:1e:5e:45:01:00:f7:11:fe:8b:cc:2b:c0:de:a5:a2:43:73:
48:07:0f:94:30:f4:c9:f8:44:b5:25:fa:7f:5e:bd:62:c0:80:
0d:cc:16:1e:40:13:a7:ef:72:b2:b5:e3:c3:8b:20:44:ef:da:
b8:52:02:a4:ff:26:a7:2e:63:a6:60:7b:e3:40:20:15:cc:ac:
01:bd:17:b0:de:f4:5f:89:1d:52:19:16:a5:23:64:48:eb:60:
f3:11:3f:26:7c:66:4e:45:26:ff:61:6f:68:30:33:05:a5:da:
57:68:90:b2:bb:27:fc:07:64:36:8a:f0:43:a4:de:f2:98:41:
8f:47:60:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:09:07 2025 by rpki-client