Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: 2C03VYZvcxfcKRbAbp4MWNZrUbx42Adn8vkJ+5Chuco=
Subject key identifier: 88:CF:CD:C6:0E:E1:B4:A9:D4:F4:68:49:EC:62:5C:34:4F:49:8C:82
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 019923A0431C47A7A366B5A24BC2E5221613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 0FC3
Signing time: Sun 07 Sep 2025 10:02:09 +0000
Manifest this update: Sun 07 Sep 2025 10:02:09 +0000
Manifest next update: Mon 08 Sep 2025 10:02:09 +0000
Files and hashes: 1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: UlsGzI/b8phn5K3OTEYOc1MEGoZcUg1Ffpo+cN4etsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:43:1c:47:a7:a3:66:b5:a2:4b:c2:e5:22:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Sep 7 10:02:09 2025 GMT
Not After : Sep 8 10:02:09 2025 GMT
Subject: CN=88cfcdc60ee1b4a9d4f46849ec625c344f498c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9a:eb:87:65:5b:15:64:a6:da:77:c2:a4:43:
29:ed:87:07:9a:2f:7c:0f:e4:d0:1f:db:b0:da:01:
64:22:ef:86:eb:de:21:f4:13:a6:ab:26:59:0f:6f:
dd:9b:dd:f9:30:14:1a:c0:87:14:8d:5f:bd:50:a6:
6c:55:88:dd:ec:8c:2c:1a:9d:6b:2e:f5:61:f6:08:
df:56:dc:96:c3:f3:db:59:ba:b2:de:c5:60:e4:f9:
74:ca:07:f6:bc:46:df:13:e4:f3:b7:36:64:9b:9b:
77:7c:70:62:84:f6:30:12:33:37:95:d7:bd:12:39:
3d:77:3c:a7:f7:62:29:7f:36:ec:b2:55:8f:cf:18:
62:24:ef:f0:26:d7:56:f5:a6:0d:f2:3c:46:d4:a3:
82:d0:0d:53:ab:4f:2e:ec:df:a1:21:cf:43:88:5d:
c8:9f:c7:0f:03:54:c1:2c:1c:a7:e1:ba:72:0f:b9:
81:ef:ed:db:0b:4d:71:5d:91:4a:20:18:86:9d:35:
e8:99:3c:2c:ec:db:3e:55:31:45:b4:ba:3a:a6:55:
fe:a6:ee:14:81:8b:72:04:67:3e:8f:50:a9:30:32:
d1:26:11:13:4a:16:b7:12:6a:92:7f:8a:ab:6c:e1:
c4:0f:0d:bb:31:24:3f:d8:9b:92:b8:a8:ca:7b:c6:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:CD:C6:0E:E1:B4:A9:D4:F4:68:49:EC:62:5C:34:4F:49:8C:82
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:10:51:0b:ae:8c:5e:9f:8e:28:44:97:60:82:0c:26:90:fb:
9c:e0:09:dd:ff:2f:60:8a:90:59:41:66:e2:20:a7:4c:88:6f:
b6:ca:6f:3b:4f:29:62:21:98:4a:e9:f9:5d:eb:c2:b9:cc:d6:
b0:eb:4d:b6:76:bb:58:f5:29:48:aa:65:6a:2f:22:27:f1:64:
0b:64:38:5b:bc:56:05:ca:7c:32:d4:fa:b9:10:d1:d5:bc:77:
d3:74:ec:2e:36:71:34:f8:2e:48:09:76:df:61:59:95:6d:13:
b5:6f:8d:18:34:89:7c:fa:66:37:51:13:7d:fe:f5:2e:31:18:
38:72:94:cd:36:c5:6c:cf:5a:ae:00:d7:13:d0:98:62:88:d6:
ab:b0:f6:9e:3f:b8:ea:cd:23:d1:82:01:a9:cf:04:42:62:f3:
74:cc:53:80:50:10:f2:4b:e0:2f:93:2f:14:b6:5c:38:c2:55:
4e:2f:e0:d7:a7:66:c5:08:59:92:c7:2f:06:b6:5d:0d:21:fd:
58:19:2c:85:91:a8:ab:bd:c2:52:ee:9e:e5:2e:47:e0:3a:28:
d5:d8:d1:4f:d9:f8:1f:d9:67:2d:d1:fe:5b:e8:3e:de:b1:a1:
47:f7:ef:7b:40:2f:10:64:8a:92:a5:50:71:f3:42:fa:29:33:
d6:71:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:31 2025 by rpki-client