Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: khZ0rvsTkn4hfteiNF5RXPp9s754ZAlqhn9Y4IvemDM=
Subject key identifier: 80:9D:46:16:ED:79:15:C7:18:54:54:AA:28:5D:7E:81:89:52:53:44
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 0198CB36D9F492D97E07C10CE07B87B94A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 0373
Signing time: Thu 21 Aug 2025 06:00:26 +0000
Manifest this update: Thu 21 Aug 2025 06:00:26 +0000
Manifest next update: Fri 22 Aug 2025 06:00:26 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: 0gorFHt0T2WwLapzZbkPcrGsoi6aiRXLfZtLoTq0j28=)
2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:36:d9:f4:92:d9:7e:07:c1:0c:e0:7b:87:b9:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Aug 21 06:00:26 2025 GMT
Not After : Aug 22 06:00:26 2025 GMT
Subject: CN=809d4616ed7915c7185454aa285d7e8189525344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:53:09:65:7e:62:09:18:3f:54:0c:6e:67:
b4:04:c2:0e:be:c7:ca:80:92:f3:0c:6a:3d:c0:95:
b9:b1:bb:41:00:08:2f:d5:94:2d:c2:ec:41:fb:0b:
24:30:12:2a:8f:74:0e:d5:f9:68:08:c9:ea:b3:ae:
c8:a2:8f:b0:e7:92:df:1b:a8:1d:f3:63:67:0b:b9:
0c:83:db:4b:18:09:e0:16:03:90:cc:5d:3c:cc:6b:
05:8e:fb:0a:59:ff:c7:33:d8:a9:8c:d6:f2:ac:af:
c5:b9:ac:25:b3:77:37:98:60:52:3c:13:c6:ed:da:
7f:61:9a:c9:39:5c:bd:cd:0d:fe:fb:0e:e4:f8:e1:
0f:2c:8a:32:d5:8f:a2:e1:a1:e2:aa:9f:f4:da:0a:
92:0f:7a:59:66:49:10:05:af:1a:48:a7:91:f7:c0:
28:3c:b9:74:a4:34:45:ee:36:a1:19:02:1f:79:36:
6e:81:d7:fe:3c:cb:4a:00:8d:5a:21:c8:f5:c8:91:
4e:3a:4c:f1:22:a8:95:05:51:4f:ce:a4:80:94:b3:
f1:8f:f9:db:17:fa:f2:ee:07:5f:d6:a6:0c:6f:c7:
10:61:3c:23:e4:f6:e1:66:ae:5b:18:3b:a3:64:2a:
23:51:d5:67:e2:d8:95:f3:78:98:06:26:05:fa:f6:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:46:16:ED:79:15:C7:18:54:54:AA:28:5D:7E:81:89:52:53:44
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:fc:b5:23:82:5c:85:8b:29:ef:83:93:39:8a:68:23:cb:
09:4f:ce:26:23:24:58:92:18:4d:57:f2:5d:c6:1c:d5:1a:15:
44:c4:29:75:e4:2d:b5:71:a4:d4:db:4b:7f:cc:2d:df:1d:03:
87:75:06:4e:4d:7e:f1:7f:bd:4e:a2:fc:40:2b:5d:fb:6c:f0:
e8:e4:1c:d9:9f:6c:1c:03:e5:f6:53:db:c4:b4:91:50:60:a8:
18:e0:6b:68:b2:84:3a:7c:32:ef:f3:c9:0d:01:6a:3b:23:01:
ea:8a:98:96:ef:32:37:94:75:ba:26:82:37:ff:4b:08:c9:d7:
31:08:55:88:66:de:85:e7:a9:77:24:af:ed:48:21:ec:be:07:
fa:e2:52:3d:76:da:d3:10:62:05:73:da:4a:31:51:31:48:77:
3b:d5:02:d2:43:8f:04:22:54:fc:b0:19:86:30:4a:08:84:eb:
9d:18:44:2a:e6:8e:40:05:cc:03:b8:b3:d1:1c:51:1a:0c:e9:
cc:cd:5e:94:33:47:89:ee:ff:30:0a:9c:99:35:cd:0b:0d:11:
7c:e8:de:2c:2a:88:ab:4e:87:31:d4:90:7b:72:10:c2:42:8c:
92:b5:a9:af:c9:63:3c:02:22:5b:6d:60:bb:55:ed:c5:97:53:
5d:e4:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 16:11:45 2025 by rpki-client