Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: fRzmFxlfWsZMcC4OE04WiNK0uHCZAnJRzdVzMRIl7iI=
Subject key identifier: C1:55:F9:C4:46:46:1E:6F:B4:88:CD:9C:18:C5:23:A1:C4:EB:39:B2
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 01992255896C0D34331F6CA46F857311D8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 06E4
Signing time: Sun 07 Sep 2025 04:00:55 +0000
Manifest this update: Sun 07 Sep 2025 04:00:55 +0000
Manifest next update: Mon 08 Sep 2025 04:00:55 +0000
Files and hashes: 1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: 4uQGyV5NiX/u41Ckz4mn/AtHKltZHpTojqrG7dTxtVg=)
2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:89:6c:0d:34:33:1f:6c:a4:6f:85:73:11:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Sep 7 04:00:55 2025 GMT
Not After : Sep 8 04:00:55 2025 GMT
Subject: CN=c155f9c446461e6fb488cd9c18c523a1c4eb39b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:d0:4d:97:60:ea:b5:cc:10:b3:e1:79:10:
62:f8:fe:0b:fe:c8:e6:37:4a:b3:49:dd:b9:6f:92:
64:ec:9c:bd:67:94:57:3e:49:96:ad:48:5f:96:b1:
1f:86:c7:ed:81:0c:44:0e:1c:ab:a9:48:83:c5:67:
c9:40:20:a3:62:f5:a3:75:2c:37:5f:bd:1e:10:39:
fe:f4:a2:b7:fa:90:fc:50:31:53:7b:14:1a:05:34:
64:75:71:09:6c:77:4c:bc:08:5f:f8:74:da:d8:54:
c3:15:e4:40:ea:aa:17:95:26:af:47:d6:2a:18:54:
ff:44:49:b0:03:d7:cc:94:e7:7a:1d:51:c2:ad:10:
b2:83:8d:a0:0b:78:28:24:d5:50:8c:c3:6f:b3:de:
cf:2e:19:8a:6b:9e:0f:c5:6a:3e:7a:97:78:f4:ec:
3b:0c:62:b8:0d:11:a4:df:83:9b:b8:07:66:12:b7:
56:bf:5d:d1:57:6b:42:28:e5:3f:a1:f8:ff:4e:40:
9f:66:55:f5:26:b2:05:10:fb:34:48:6c:70:34:7b:
80:7a:31:b5:5d:b6:c5:44:e1:d8:f5:fe:88:31:6f:
56:03:cc:2b:6f:c6:a3:51:2b:43:d9:7e:3b:b3:07:
67:98:dc:a8:a0:4a:26:ff:c7:e3:13:e4:b3:f6:0b:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:F9:C4:46:46:1E:6F:B4:88:CD:9C:18:C5:23:A1:C4:EB:39:B2
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fa:82:86:88:bd:a8:0f:db:7e:96:b8:86:ca:6e:2f:1b:08:
95:aa:af:ad:9b:8a:e0:55:39:3d:7a:e6:03:b8:23:65:39:82:
39:ef:ab:44:ac:f5:31:0a:d4:3d:0c:2a:be:4e:94:ef:0f:04:
66:76:17:ef:74:ba:57:15:28:1d:02:e2:40:58:14:f4:65:07:
db:ae:f4:d1:1c:6c:eb:27:05:da:ed:d7:8d:e5:1b:3b:10:2e:
06:80:d1:0f:40:ee:db:c0:e4:1f:c4:e4:74:73:fc:78:28:36:
b5:74:34:02:8b:d6:c9:57:e2:d3:36:21:b7:61:80:38:a4:5a:
21:85:d4:49:c1:e5:9e:e9:2a:a7:2f:a1:d9:79:c0:93:fe:b5:
98:4c:9b:bc:48:43:81:37:de:7d:2e:40:41:e6:57:28:36:c5:
8e:5d:67:ab:19:c6:ce:57:bb:fc:21:cb:03:a2:6a:1c:96:c5:
d4:28:28:a6:13:ca:e1:11:3a:35:58:e3:91:d7:97:e5:d8:51:
c0:88:47:ba:5a:92:1b:20:01:ab:83:f9:0c:0c:c7:8e:97:59:
71:08:72:91:fc:29:71:b7:cf:17:d6:e7:e9:48:5b:a3:eb:0f:
f9:d7:55:26:cd:af:bd:6e:d4:0d:e7:3c:af:82:9a:4e:7d:86:
61:1b:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:22 2025 by rpki-client