Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: +iD6acCXp4PxDRH8SUai6adfVNANpQfeZC9WOo84yIQ=
Subject key identifier: 88:55:96:91:DE:4C:CA:B2:F7:1F:1C:94:E6:6E:61:C6:BC:51:1F:1E
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 01992AB3BC4276F84B4B71BF8150C9D4ED3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 1649
Signing time: Mon 08 Sep 2025 19:00:46 +0000
Manifest this update: Mon 08 Sep 2025 19:00:46 +0000
Manifest next update: Tue 09 Sep 2025 19:00:46 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: 1fgmr/QctmyPuJEkt1OVhsq7NxYeEcTFUSEAmiFNTCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:b3:bc:42:76:f8:4b:4b:71:bf:81:50:c9:d4:ed:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Sep 8 19:00:46 2025 GMT
Not After : Sep 9 19:00:46 2025 GMT
Subject: CN=88559691de4ccab2f71f1c94e66e61c6bc511f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:65:44:8c:97:e7:42:b7:3f:8c:cb:01:1b:
40:08:bb:80:bd:08:2f:76:8e:4c:9f:f8:f3:41:bf:
44:bd:c6:41:9a:9b:9b:db:f6:f1:d4:b6:36:90:57:
1c:b1:7b:15:e5:28:bf:fb:ed:05:40:97:2e:47:b0:
75:2a:65:d0:47:26:4b:a6:ec:7f:2f:ae:ca:96:d7:
12:b6:da:5f:c8:d1:5d:b3:6f:e8:84:f3:88:97:54:
ff:8b:cc:72:97:66:49:d0:cf:af:e9:04:d9:b9:ff:
85:85:99:56:d7:e1:f2:cd:7c:bd:27:33:ec:f3:fc:
ba:ce:aa:ea:8f:61:04:ab:ce:16:d2:59:b5:05:c5:
84:e9:0e:ea:2e:c0:80:1f:34:13:13:1e:c4:fb:6a:
54:27:64:52:5a:fe:51:d0:e9:0d:1f:12:5a:32:d2:
d7:05:d8:ae:90:8c:53:80:d6:8d:0d:1d:a1:c6:bb:
cb:bc:b6:c1:d7:58:c9:18:7c:a8:2f:c3:63:1c:cf:
6e:7a:45:56:8c:d8:6d:a3:93:85:5e:c3:e5:2d:50:
ad:6e:1b:b7:c8:bc:2c:7a:55:95:ca:bb:83:66:64:
5c:b8:3c:2a:64:b0:c3:3d:be:b7:2e:9d:28:6b:47:
ed:50:5c:27:95:0b:57:e6:4d:b0:5e:97:af:ed:77:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:96:91:DE:4C:CA:B2:F7:1F:1C:94:E6:6E:61:C6:BC:51:1F:1E
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:55:f5:a7:4e:ac:7e:1e:9f:d2:ba:a3:ae:6b:bd:26:d9:5d:
85:01:f4:99:b5:a1:4d:40:9d:69:1c:10:e4:94:ef:f7:e0:63:
97:71:95:3a:fb:4b:3b:45:ec:5e:55:f0:5c:de:d9:06:ea:bc:
76:2b:1d:c4:4b:cd:99:0d:cf:30:5c:ae:60:51:91:91:69:6b:
45:42:95:e5:80:49:0a:87:23:5d:d4:8f:6e:f1:10:38:8a:b9:
a5:14:b7:59:5d:34:9a:e9:70:b8:e2:7f:2d:e0:65:93:96:78:
a1:f5:7d:55:f7:56:c2:2c:dd:4f:13:2b:eb:c1:fa:92:26:ff:
eb:6f:69:1e:ef:df:7f:b6:a6:45:9a:48:b1:09:fe:dd:7d:ec:
76:9d:37:1e:99:d4:cb:b5:77:97:f3:1d:ee:68:91:fc:75:af:
f8:43:0e:a3:43:7a:dd:c3:7f:1a:be:ae:ec:54:b5:27:1e:0a:
d1:70:b0:e4:c3:c6:29:3c:fc:83:58:b6:e3:ca:df:df:3a:53:
6f:76:4d:9e:d9:87:58:56:31:10:5e:3f:06:83:1e:de:87:42:
a9:68:75:04:99:cc:41:dd:ab:d4:c8:02:cc:9a:9b:06:2f:42:
3f:89:3d:e3:54:2b:22:6a:20:63:94:10:fa:90:f2:fe:6a:2b:
3d:77:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:17:20 2025 by rpki-client