Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: l+HuLh0A4iYbw97EzwYPLCBUhOoHB/BrkbzFaYqE0sA=
Subject key identifier: 23:D7:2D:42:80:EF:37:A2:D3:62:53:DA:7C:49:F5:E9:5B:98:A3:F2
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0199240D9C3437F3B7474D0978C3FB385146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 04EF
Signing time: Sun 07 Sep 2025 12:01:35 +0000
Manifest this update: Sun 07 Sep 2025 12:01:35 +0000
Manifest next update: Mon 08 Sep 2025 12:01:35 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: F/1e3VeRIh8zDaRN7BxCTtCfdphAyuD+cwR8Qaqz0t4=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:9c:34:37:f3:b7:47:4d:09:78:c3:fb:38:51:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Sep 7 12:01:35 2025 GMT
Not After : Sep 8 12:01:35 2025 GMT
Subject: CN=23d72d4280ef37a2d36253da7c49f5e95b98a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:21:05:4b:8f:f5:6f:df:93:32:45:77:98:
d1:c1:a8:d9:01:42:13:e8:41:fd:40:7f:54:dc:40:
14:89:92:40:98:ba:77:42:ef:bd:09:22:91:b2:70:
c7:c8:2c:88:fc:3e:98:38:73:c0:55:cb:20:c1:e6:
a8:99:ad:c8:98:62:8c:b2:c1:68:12:52:07:8e:1f:
38:17:23:1e:d6:83:bf:61:ff:19:ed:17:ed:52:63:
2b:b1:e0:19:6d:b2:fa:aa:18:4b:ea:0f:49:5a:50:
a2:4a:c7:9b:9a:28:eb:18:63:86:8e:4d:4d:ef:b9:
74:b8:84:64:3b:a8:00:44:8c:7c:7a:96:6d:65:70:
94:5d:02:c6:23:68:1f:2b:7e:b3:33:3a:fb:92:c8:
27:5e:35:83:06:63:a9:d0:c1:45:e5:5a:c3:dd:0c:
0c:55:51:92:c3:aa:43:9c:74:0e:84:b1:18:49:da:
68:98:db:e0:d3:5f:32:e0:be:6d:9c:31:5c:c6:77:
bf:d7:1d:67:d5:a2:23:8e:c8:dc:c8:2d:d7:05:f5:
76:9d:bd:6e:4c:3d:1b:92:61:a6:73:83:7b:e9:b1:
23:cd:b4:0a:ff:44:0f:95:3c:07:12:9c:cd:09:5a:
d8:ce:63:30:6e:05:c1:18:e9:10:e5:f4:d0:9d:fd:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:2D:42:80:EF:37:A2:D3:62:53:DA:7C:49:F5:E9:5B:98:A3:F2
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:97:22:32:17:98:fd:2a:e7:bd:17:ab:89:df:f8:1d:df:
bb:af:51:64:a9:d9:d7:74:93:6f:13:b1:d6:af:4b:0f:fb:c1:
6e:31:42:f1:7b:79:24:b6:53:9f:a8:79:9a:e6:88:94:95:3e:
22:e0:b9:2e:e4:2f:39:33:49:b0:4c:b6:73:04:d2:3a:ec:11:
03:e5:6a:ce:6a:c1:2a:f2:5d:19:1f:a9:38:b2:91:bf:19:a4:
3e:fd:52:9b:2c:2e:d4:8f:f0:f2:83:2d:88:81:1b:c4:bf:7b:
77:13:ed:c4:61:a4:c7:20:c5:48:11:15:63:70:21:bc:f8:64:
8b:20:d2:61:14:26:9b:28:4a:01:8d:78:c6:ab:d0:da:1c:45:
77:79:bc:9d:2d:fc:66:cf:ed:21:4b:e2:e5:a4:4b:32:9f:85:
f3:03:0e:4b:82:b3:82:95:60:d2:10:f4:9e:a9:4b:7b:bd:32:
36:6d:f2:5b:28:f0:66:34:7b:78:8b:50:04:96:25:46:81:9d:
68:76:00:ae:85:71:ac:b1:b0:35:35:aa:2c:70:15:0e:07:c1:
89:05:10:f5:29:d7:67:75:aa:2f:39:06:e4:f9:91:f4:c2:36:
83:88:7f:e2:6b:94:8e:df:1a:ad:ac:d8:4a:09:67:3e:3b:f6:
1b:4b:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:50 2025 by rpki-client