Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: juAJXVMeK2YYuCm1lvgwq+r4p2EBM687gH6kaJ+ZgDM=
Subject key identifier: FA:20:73:2F:06:09:CC:4E:E1:11:E8:41:48:1A:D9:97:D3:F8:B5:BC
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 01985042BEAFE805CE8884905CE0B3B4A700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0E78
Signing time: Mon 28 Jul 2025 09:00:07 +0000
Manifest this update: Mon 28 Jul 2025 09:00:07 +0000
Manifest next update: Tue 29 Jul 2025 09:00:07 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: tT9kvKsUhHpX484yQj/QF97wFut9VqfnTzUhGh8iiHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:42:be:af:e8:05:ce:88:84:90:5c:e0:b3:b4:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Jul 28 09:00:07 2025 GMT
Not After : Jul 29 09:00:07 2025 GMT
Subject: CN=fa20732f0609cc4ee111e841481ad997d3f8b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:25:14:6d:3b:bd:af:3b:e3:84:5d:c5:6b:
5d:9e:37:07:2a:e4:75:3a:78:ae:a7:ea:b7:57:2d:
b7:c8:ff:09:03:a0:01:44:16:93:49:7f:d6:2f:09:
02:f2:aa:64:2c:b4:70:e0:8d:56:1a:b8:82:b4:ce:
28:59:af:65:61:0e:e4:b9:8b:cf:71:c4:0d:f2:ea:
59:f5:d0:9f:02:62:cb:6a:5b:53:ca:e8:50:6a:d2:
b3:b1:98:c5:f3:c2:bb:9b:d8:81:57:8d:97:75:db:
bd:d1:48:c5:4b:2b:0e:8f:f0:ab:e4:9a:73:d7:01:
eb:15:e9:06:3c:c3:b8:50:6f:f3:f2:72:e9:96:89:
d7:9a:27:11:57:20:b7:1a:f9:45:60:73:ec:74:a7:
10:65:5f:e6:a0:11:1d:4d:f2:8a:b8:3a:56:3a:64:
7b:ad:a0:64:33:71:9d:87:93:3f:0d:a2:25:df:79:
37:6d:55:11:30:b5:6b:9e:64:47:db:28:d6:b1:29:
12:11:b9:33:5a:18:7c:5e:d6:f5:d1:b8:3c:80:74:
00:85:3d:24:b6:97:72:fe:a3:29:c7:dd:5e:2b:1e:
9e:2a:dd:bb:37:7f:9d:62:56:72:fa:62:ee:d6:ec:
a5:48:32:b8:d2:d6:ae:86:c4:14:66:73:c8:d9:55:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:73:2F:06:09:CC:4E:E1:11:E8:41:48:1A:D9:97:D3:F8:B5:BC
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:32:94:48:9c:94:c4:67:ab:20:ae:cd:61:50:a7:a8:40:b3:
0a:d7:32:21:b0:97:68:c2:84:0b:e6:03:f7:0a:07:cf:40:5b:
22:7b:02:aa:9f:68:a3:25:13:ad:85:6a:27:ab:74:df:1f:be:
e9:8c:ac:46:5d:91:de:32:cd:52:3b:c6:4c:0a:4c:55:8d:7d:
8f:a9:dc:72:5b:f6:db:d1:b3:9a:1f:e9:cc:f1:eb:3f:8f:cc:
58:3b:31:32:09:68:1f:8e:25:ac:d8:2b:48:1b:a2:cc:b5:fe:
47:38:8a:72:ea:4b:61:aa:60:83:25:52:4e:ef:a3:10:76:cc:
8e:ef:fb:ba:af:42:38:1c:f2:29:b0:d3:e9:cb:c0:20:7a:b9:
82:5a:1e:ee:a0:90:a0:aa:5f:f4:03:42:02:44:fc:3d:fe:92:
f6:55:76:fb:0c:d5:3a:8f:1c:fe:b3:ec:8b:e0:cd:f8:c8:5f:
1c:4a:b7:d8:93:0d:0e:b3:4d:0e:19:8f:82:ab:a9:11:fa:b5:
9e:44:47:e8:6a:5d:0b:db:b2:62:61:82:98:d6:e3:b6:50:4a:
7b:73:30:99:b4:54:44:79:21:dd:4f:cd:91:43:ba:e2:e3:41:
41:95:fd:29:e0:51:4d:46:f9:b8:05:ab:84:89:1f:51:01:06:
db:d2:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:31:41 2025 by rpki-client