Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: 31ePD36nhYFOPT6MsifndG5LCXQCeecFpIY99rzgEMA=
Subject key identifier: FF:A4:1C:7F:7D:9F:63:AE:70:4F:19:68:29:3B:7B:D7:E3:DB:A3:FF
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01984B53748FBDEA080E8FED5331B455B2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0B52
Signing time: Sun 27 Jul 2025 10:00:17 +0000
Manifest this update: Sun 27 Jul 2025 10:00:17 +0000
Manifest next update: Mon 28 Jul 2025 10:00:17 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: txlshIKxSHJiLu/ZH/pTDYjcc1dNKTDJ28GIiQ48G/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:74:8f:bd:ea:08:0e:8f:ed:53:31:b4:55:b2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jul 27 10:00:17 2025 GMT
Not After : Jul 28 10:00:17 2025 GMT
Subject: CN=ffa41c7f7d9f63ae704f1968293b7bd7e3dba3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:a7:b5:e5:8c:65:42:98:f9:ae:43:00:85:
62:8c:c4:06:da:77:d5:6a:86:c1:30:10:76:57:10:
b6:48:79:6b:5d:9b:52:ed:18:ff:ec:56:9f:16:6d:
75:95:ad:f3:f9:8b:11:ea:98:94:33:60:5c:54:2f:
96:33:c1:fc:dd:4f:58:7b:84:a4:d1:af:fb:92:f8:
88:0c:33:19:0a:51:a1:76:4b:72:73:f7:cc:52:84:
27:98:ec:a5:08:38:59:65:a3:86:9a:1b:58:4a:76:
cd:d5:d0:fc:ed:1b:00:45:d3:37:43:0c:47:82:f9:
6d:e8:87:8b:53:ff:cc:b3:d5:fa:c9:de:1d:26:60:
7c:e3:9a:a1:f8:88:f0:46:1f:fd:82:db:34:f0:30:
a0:4c:9a:24:eb:6d:3a:25:26:a8:ac:37:6c:93:62:
08:a7:69:c0:ca:af:e0:b2:ba:67:3f:a0:45:b6:0b:
92:6d:2f:08:cd:3a:5b:b7:56:f8:c9:e2:ec:2f:1a:
de:02:a3:f2:f1:3a:fb:56:5a:d0:f1:a5:28:08:ec:
5a:fd:71:cd:35:68:c1:60:f5:04:bc:49:bd:e9:1d:
f3:e8:0e:f2:bf:96:81:27:cf:47:c5:7d:d7:12:11:
8e:be:6d:bf:98:e4:7d:11:0f:af:62:c3:62:58:80:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:1C:7F:7D:9F:63:AE:70:4F:19:68:29:3B:7B:D7:E3:DB:A3:FF
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5f:dc:68:ae:53:ff:3b:bf:17:2e:a6:c5:d1:63:72:9b:a3:
ce:43:29:46:95:1d:3f:37:b1:f4:56:e0:77:43:e6:96:32:11:
3c:87:3d:c0:f4:bf:0b:14:80:c4:9e:c4:1f:e6:e7:ec:6c:f6:
25:d9:a0:b2:09:5f:5e:6b:35:b6:0d:94:b1:41:6a:7d:af:e5:
e5:e0:9d:39:16:75:4d:3d:86:4d:44:bb:87:01:79:7d:1a:cd:
d7:d7:87:0d:97:32:34:c3:d8:04:c4:ec:81:7c:c4:21:f4:03:
76:52:fe:e7:26:40:5a:c9:0c:c2:60:3c:cb:da:6e:bf:42:06:
91:f0:44:64:2d:27:09:0b:54:3c:81:a7:cb:13:4d:7c:59:78:
dd:35:15:fc:af:95:a7:50:07:86:28:d8:6a:fc:5b:21:cd:82:
56:79:cd:f0:ff:d7:84:41:0f:87:2c:8a:a1:be:ce:20:22:10:
f4:af:78:b2:0c:5f:d3:33:47:7c:fc:b5:be:11:7c:14:1b:29:
a9:95:b8:84:0e:11:0f:86:b4:8a:80:48:b1:c2:16:04:57:23:
ab:10:bc:23:0b:30:8c:e1:47:7c:4f:a2:cb:55:91:a2:31:38:
ad:4f:9c:cc:6f:85:83:47:c0:7d:25:3f:7f:08:b0:f7:ce:08:
05:01:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:58:56 2025 by rpki-client