Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: 54d9+dNUg7ZIBesqCiN0lYVRFY4YxqHjkN1IaoIVV3s=
Subject key identifier: EB:6D:9A:E6:45:60:A2:32:CF:41:8A:45:C9:B4:26:9D:AA:7A:A8:87
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 0198499BE2443782EDE28E3CBE38C81EC3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:09 +0000
Manifest this update: Sun 27 Jul 2025 02:00:09 +0000
Manifest next update: Mon 28 Jul 2025 02:00:09 +0000
Files and hashes: 1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=)
2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: 8tweMnRy6EGP/ibGKD7miJeQ+7aWep42gUWWZSb2elU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e2:44:37:82:ed:e2:8e:3c:be:38:c8:1e:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Jul 27 02:00:09 2025 GMT
Not After : Jul 28 02:00:09 2025 GMT
Subject: CN=eb6d9ae64560a232cf418a45c9b4269daa7aa887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:a1:e2:c2:55:4c:cd:2e:27:d2:68:4c:87:
34:a0:67:5a:b2:0b:09:e2:b8:30:d5:ee:4f:7e:4c:
4f:c5:fb:d1:fb:ae:80:da:cc:84:25:61:a2:c4:5b:
66:81:9b:c7:11:be:10:43:c6:a3:56:09:9d:ee:96:
0a:16:eb:73:f0:88:e8:b3:ca:2f:9d:7b:c1:74:03:
1d:54:7e:b4:e5:95:a9:74:fb:87:a7:ed:8e:70:86:
32:b9:32:2e:ab:5a:31:3a:86:3e:69:9f:ae:3a:f5:
00:cc:f9:51:20:d9:db:d2:4d:6f:7d:13:7e:14:2c:
af:f8:41:44:a0:2c:ff:84:ed:60:ff:1b:fa:5a:a3:
0f:8f:5c:e3:91:c0:16:23:fd:05:b9:fc:b3:c8:25:
39:36:66:48:81:83:d3:9e:0d:c2:c2:d3:cb:b2:e9:
7d:0c:f6:cd:e9:dd:18:ef:8e:22:75:ac:a8:21:6e:
b3:f6:05:38:79:0b:6e:5e:8b:07:32:90:13:47:b8:
a8:b2:dd:cf:59:ef:2d:92:7b:4f:10:8f:40:b7:7a:
1b:94:f8:f4:bb:85:db:d8:ae:b2:78:22:3e:fa:40:
3d:e3:29:d0:ba:4a:1b:ee:43:00:01:cf:ab:19:33:
05:5c:5e:39:a2:fc:45:6f:85:62:36:3d:24:ad:9c:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6D:9A:E6:45:60:A2:32:CF:41:8A:45:C9:B4:26:9D:AA:7A:A8:87
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:42:0e:cd:3f:25:b5:7d:c5:7f:19:67:28:af:cd:44:95:d2:
84:19:da:4b:ae:b5:f6:b6:83:3f:62:0c:43:bb:f5:34:53:9c:
88:29:39:37:69:b4:b4:a5:d1:76:2c:8f:71:2d:ed:60:4c:38:
5e:a8:b6:8a:6b:79:9d:a0:b6:67:5b:d1:54:66:d7:99:4f:59:
69:df:49:9b:b2:30:30:48:fc:8f:c6:6e:98:55:8c:86:90:5b:
6b:5b:af:06:e8:09:02:8d:03:6a:72:09:35:97:ce:12:a0:ca:
16:19:be:ce:44:69:83:9a:e0:a8:4c:9d:38:d3:e1:47:b7:d1:
83:87:07:b7:ee:60:4e:91:2f:79:0d:61:4c:79:d1:3e:0e:ae:
f5:0e:ef:78:3b:7a:9d:86:31:51:13:96:8e:f2:df:20:ad:c1:
a0:6f:cc:03:47:68:f7:93:35:df:61:e5:74:7d:2b:1c:66:0a:
97:2b:29:2c:c9:c8:5c:fb:bd:4a:be:51:f2:09:39:34:91:e0:
c8:da:72:cd:90:57:f3:67:ef:9e:2b:dc:47:15:37:a9:d8:6f:
29:df:8b:4d:b6:48:ab:cf:36:5e:13:1b:ea:03:26:d7:e0:08:
a3:6b:ac:4b:f3:66:1e:20:56:38:a0:e5:af:96:eb:ad:0f:f4:
c9:61:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:01:31 2025 by rpki-client