Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: 8kXqSTV63UD+1t559DKJqvJOQ974UrsiOX5RNNhp6no=
Subject key identifier: 43:D3:45:19:CB:78:54:9B:A5:06:44:AC:92:0A:B8:0D:41:E3:26:4D
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 0198375F4DC5087E3C43D56F8EA65560BFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 15CB
Signing time: Wed 23 Jul 2025 13:00:49 +0000
Manifest this update: Wed 23 Jul 2025 13:00:49 +0000
Manifest next update: Thu 24 Jul 2025 13:00:49 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: Gip+b15QVyhr91GUpz9Z7D0svXHu25m/lEkyE/LTgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:5f:4d:c5:08:7e:3c:43:d5:6f:8e:a6:55:60:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Jul 23 13:00:49 2025 GMT
Not After : Jul 24 13:00:49 2025 GMT
Subject: CN=43d34519cb78549ba50644ac920ab80d41e3264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:cd:32:24:fd:63:25:7d:04:f9:f5:42:b5:
7a:ab:b3:bf:b7:7d:3c:9d:bb:e7:85:87:ed:b2:42:
ba:73:81:ba:9d:06:26:77:98:cf:5f:5a:da:86:1e:
33:90:be:44:36:0f:61:77:a9:bb:fe:36:cc:ed:79:
a8:2f:ce:df:56:47:c6:6d:10:82:0d:c7:56:af:0e:
2d:f4:0d:58:bb:1c:46:2f:d6:2a:54:1b:09:09:14:
7d:36:87:65:94:4b:d3:33:c6:fc:cf:60:71:b1:b3:
21:de:c0:9c:55:58:26:96:58:ec:ac:75:52:e7:ec:
b1:7a:e4:2d:c5:9f:c6:ca:4a:a0:59:46:7a:1b:67:
25:9c:12:4a:03:74:78:ec:f7:3f:fb:b7:e7:45:c6:
ef:3b:24:d7:1a:62:a6:1b:25:76:d6:e1:48:07:9d:
49:3b:52:3d:79:f0:67:36:b7:2d:08:db:0e:a6:f7:
f0:3d:b4:d5:35:71:58:e3:07:b0:07:b1:b3:40:51:
d6:76:61:b1:3d:64:d8:39:cf:3e:83:14:d6:89:76:
7a:fd:99:40:6f:17:3d:2b:02:fa:ed:20:4f:5e:ca:
1b:7b:8e:a2:3c:f6:7e:61:6c:21:59:52:ea:c5:91:
42:d3:eb:6b:12:5a:a7:89:c8:88:04:d6:3f:20:a4:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:45:19:CB:78:54:9B:A5:06:44:AC:92:0A:B8:0D:41:E3:26:4D
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:0e:6b:5a:d7:00:bf:0d:87:53:90:6e:4c:09:a2:a1:70:
ac:86:e2:3a:2a:55:8b:bd:1d:27:f7:a8:08:d4:9e:2e:f1:4a:
8e:cb:af:32:70:b8:06:91:18:85:20:11:bd:7e:71:cd:51:2f:
74:a7:83:33:da:70:18:0f:fc:f5:d2:52:22:b0:5d:b4:b3:89:
1e:d8:11:0f:89:90:dc:f5:ac:9f:06:3b:c1:cc:17:d1:1d:46:
5f:06:b6:e4:a1:7d:33:f0:ce:6e:a8:13:46:f2:ea:f9:a0:05:
7b:b0:04:43:da:ed:3c:bf:e8:6d:ed:03:7a:a5:ed:9e:9e:dc:
b2:d5:3a:44:94:2b:2f:bd:9b:44:da:45:c3:07:81:b0:b8:b0:
72:34:3e:44:37:10:4e:76:df:77:50:6d:15:33:98:bf:14:62:
c5:64:c8:0f:3a:29:bb:d4:40:52:e0:1b:7e:b7:16:51:d0:fa:
ff:fa:e9:4c:3c:93:23:2a:bb:2d:b5:f4:95:45:ea:b8:8a:a5:
d5:d5:90:e4:9a:86:9c:a5:43:d5:c2:91:22:49:7d:4e:49:c1:
12:d5:f4:0d:a0:55:72:05:8d:b9:cb:3f:0b:e3:8f:48:46:8f:
05:d9:20:ac:82:dd:f9:bc:29:35:04:a9:d4:d5:fe:f9:4f:ce:
98:45:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:30:43 2025 by rpki-client