Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: DX0WMa1g6hT2eAJLNcII7n07TPpjEWYBmV8ufnjCxSc=
Subject key identifier: E9:62:3D:37:F1:42:95:CC:4F:82:B8:51:08:80:47:E7:98:9B:93:13
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 0198368446BEE9CE39D4111A14BD42A74C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 15F9
Signing time: Wed 23 Jul 2025 09:01:35 +0000
Manifest this update: Wed 23 Jul 2025 09:01:35 +0000
Manifest next update: Thu 24 Jul 2025 09:01:35 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: RcAitRxm7g3lNDP6ZLqrMh0Dl6IuBRWEM7rj8kDcGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:84:46:be:e9:ce:39:d4:11:1a:14:bd:42:a7:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jul 23 09:01:35 2025 GMT
Not After : Jul 24 09:01:35 2025 GMT
Subject: CN=e9623d37f14295cc4f82b851088047e7989b9313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:bf:9e:e1:d1:ce:11:b7:3f:75:a2:24:9e:
51:31:93:32:af:da:af:5f:ff:70:a2:d7:1a:dd:a4:
94:2b:9c:ce:c6:da:16:2a:fd:fb:a7:bd:07:6a:dc:
df:5f:72:13:65:6e:6f:ad:b4:d8:ea:37:2e:b7:7d:
d5:9d:34:a2:7f:74:17:21:d9:17:ab:a9:20:0c:44:
a0:4a:32:bc:94:a2:4b:9d:2d:ac:78:e0:32:3d:dd:
53:7c:db:c0:bc:3f:a1:0a:b5:db:09:de:c4:10:3e:
13:78:31:62:a9:65:4b:a0:7a:fc:fe:d6:19:da:22:
1a:c3:e0:ad:71:20:b1:d0:25:f3:bc:73:ec:16:8b:
13:25:c8:19:b5:84:ad:2a:72:c5:8a:ac:7f:98:68:
e5:b4:99:af:c0:fd:52:aa:48:62:9c:81:64:20:5f:
01:e1:e7:b8:9b:d6:ef:a3:34:f7:07:43:9d:a4:8f:
af:a3:85:6b:5d:56:7c:f2:bb:97:e1:56:6c:27:14:
62:dc:30:78:2f:f8:f1:ff:c5:86:de:58:36:3b:26:
19:6b:c6:63:1b:c5:a8:01:6d:16:1d:61:b2:d8:6f:
5a:ff:ab:96:6d:d0:8a:69:53:21:f0:f4:ce:ad:fe:
33:ce:95:06:c1:dc:47:57:b9:ae:57:31:07:ae:8e:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:3D:37:F1:42:95:CC:4F:82:B8:51:08:80:47:E7:98:9B:93:13
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0a:ee:8b:31:7c:fb:3a:87:d8:1b:de:be:a3:8f:c8:73:ac:
71:5d:7c:5a:71:93:3c:46:56:93:d0:ce:04:5e:8e:e0:df:41:
3d:1e:87:0e:18:a8:f3:4e:58:6f:f5:7d:78:3d:79:70:9a:74:
b7:b7:ab:d7:b4:8e:06:6e:09:20:79:f7:01:cf:63:10:94:91:
83:08:b3:79:91:f1:e5:a5:fb:33:08:73:f7:9d:ba:78:af:6f:
37:01:fa:9a:2c:cf:35:db:c9:2b:7f:3d:de:31:1f:5f:79:17:
c2:c7:7e:b2:10:9f:fb:c1:37:29:92:d0:68:85:c4:cf:ff:f9:
ce:7c:19:cf:3c:65:94:bc:eb:74:da:33:a1:ce:49:88:4e:4c:
40:6c:57:d5:89:8d:ea:a1:3d:51:1d:97:0b:50:93:46:21:51:
61:27:33:fb:c2:bb:2f:7a:c8:e7:7f:dc:c9:4e:53:3e:6e:45:
54:63:53:e0:3d:23:e9:cf:ea:ce:7e:6f:a1:5a:88:b6:c9:b8:
b3:3b:16:7e:60:3f:2a:06:c3:a1:53:7c:34:4c:0f:38:4f:6d:
87:47:c2:33:ec:5e:06:59:6c:21:6b:28:be:8b:9e:e0:93:c2:
42:6c:03:23:94:9a:70:56:7a:48:f2:d8:aa:be:b5:4f:bd:e2:
d0:ea:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:46:23 2025 by rpki-client