Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: 4tc9lyKGVhSDwug3qfEtOr8Wa0U+G2LUVOkkiB4NmWU=
Subject key identifier: DD:89:53:55:54:C4:A6:25:18:0B:A1:45:77:87:34:DA:DA:0F:F2:8F
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 0199228CB64E8795D5E655F5BF68A040BCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0D30
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: HvNKXnB/tw4ryRJGlCZT2nN+Ue8fwwwX2l8FWUxmRVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b6:4e:87:95:d5:e6:55:f5:bf:68:a0:40:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=dd89535554c4a625180ba145778734dada0ff28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:54:7c:d7:41:b7:f4:93:cf:0a:da:c3:0c:
82:b7:54:e2:a2:25:34:c0:95:ff:26:87:7a:39:1b:
44:db:5b:26:13:ad:7b:ce:ec:4a:31:38:cf:1c:f3:
3b:73:59:f3:22:19:79:14:24:c0:ba:f4:ff:8c:e2:
bf:8e:55:aa:b4:6b:d2:9e:cb:72:1d:4f:3a:a0:ac:
43:05:d9:3d:64:52:64:a6:47:03:ee:b7:9b:09:2d:
ff:fe:34:23:8d:cd:dc:86:cd:66:36:22:00:45:0c:
ba:6c:0d:42:8f:28:4d:ec:ce:5b:c7:e1:c2:e7:2e:
15:dd:d2:a7:1e:c6:d9:3b:ef:de:1d:53:aa:11:81:
c0:bc:74:86:45:43:66:5e:23:66:f2:f6:0f:53:68:
5c:f5:f0:ce:11:9f:dc:8d:6d:9b:9e:b0:aa:b6:d0:
df:2c:7a:da:43:2a:70:15:7e:73:c1:8f:91:16:53:
6a:e0:e1:13:dc:69:3c:1a:c9:d9:f0:56:06:c7:d4:
38:36:47:36:90:b8:1d:4c:86:e7:35:bb:9e:47:a0:
0a:51:be:64:08:cd:27:1d:3f:48:31:a3:8f:89:77:
17:4d:22:ec:44:c9:72:49:bf:8d:b8:21:6c:6a:74:
8f:e0:be:da:a4:4d:a2:09:3c:b3:37:43:08:ee:10:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:53:55:54:C4:A6:25:18:0B:A1:45:77:87:34:DA:DA:0F:F2:8F
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c3:5f:ee:6e:79:9d:f6:d1:04:3d:2f:66:9f:fc:13:73:cc:
2a:f8:35:04:be:41:c8:a2:8b:9b:3b:bf:2a:74:d5:4a:7a:37:
a3:e5:2a:c6:98:b4:95:dc:26:60:18:7e:a8:4c:88:6e:10:d2:
23:ea:41:b8:88:cd:6b:bc:39:7e:c9:e2:74:c0:0d:fd:5b:6c:
ef:6d:84:a3:a0:9a:bd:ff:75:5c:0d:4c:0e:54:6b:e3:30:13:
63:9f:84:f9:f6:bd:a6:37:ce:01:42:98:6e:7e:68:e0:8c:f6:
b2:ac:f0:b1:59:0a:b7:0f:13:b2:f1:b2:79:64:d1:4d:91:c5:
83:2b:c2:82:12:0d:0b:b9:b3:b0:3c:2e:55:bd:a2:af:14:8f:
24:35:c8:49:48:77:b9:e8:30:7f:e7:78:f3:67:2b:c1:39:1a:
78:06:e8:64:2b:c1:63:3d:08:94:d5:3a:58:17:52:7b:7c:68:
dc:8d:93:54:cc:84:75:40:ca:7a:99:c4:dc:f3:57:87:65:4f:
50:9d:84:f4:75:2d:99:08:99:91:95:bb:84:c5:c2:47:e9:dc:
86:bf:dd:0d:e2:d6:06:87:a2:6d:b0:0e:04:2c:5e:0d:de:87:
af:b4:2b:1f:30:ec:67:b8:4b:44:f5:8a:ab:a1:37:82:ea:a7:
0d:8a:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:34 2025 by rpki-client