Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: DSKmy5+qbp6WHbYpqaHmXtqVh2DxSrvQG/R8KsemUrY=
Subject key identifier: BE:B1:FF:44:1A:C2:C0:69:CE:D6:11:00:A4:09:94:44:BF:03:75:6D
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01990E62C5BA784D587B4CFD5B58C9076EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 0F93
Signing time: Wed 03 Sep 2025 07:02:58 +0000
Manifest this update: Wed 03 Sep 2025 07:02:58 +0000
Manifest next update: Thu 04 Sep 2025 07:02:58 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: r4J/DrJ0Y7aFL59IGJ5UDmig0KCJVrh2MF3CgCao8HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:62:c5:ba:78:4d:58:7b:4c:fd:5b:58:c9:07:6e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Sep 3 07:02:58 2025 GMT
Not After : Sep 4 07:02:58 2025 GMT
Subject: CN=beb1ff441ac2c069ced61100a4099444bf03756d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:6d:61:df:8c:1f:42:e0:18:13:ec:07:b8:
9c:18:62:57:77:5d:64:95:24:d1:2f:df:15:85:a4:
0d:3e:b1:40:f6:eb:b3:ef:e7:fa:a7:dd:26:81:c0:
50:e1:a3:f2:94:d9:64:e4:fa:1e:b2:a6:9b:77:5d:
17:ea:bf:15:c3:7a:db:c0:1d:a9:81:5c:21:fe:70:
b6:02:43:26:c2:c9:d9:6a:9b:b2:ff:cf:4d:28:2a:
f4:09:53:d8:4b:bf:fc:b5:7e:b9:ec:2d:e1:7c:90:
14:f9:f9:af:da:85:f2:a4:cb:b4:d9:80:b1:0b:2c:
bc:c7:cb:1c:26:7a:6b:45:5e:4c:25:ed:6c:18:1b:
59:fa:4b:e5:3a:25:f7:9d:e8:b9:30:85:61:63:fb:
9c:1d:fd:e4:0b:bd:b4:b6:80:a5:f8:72:4e:f5:7b:
67:c9:5f:5b:53:1f:77:f2:fa:d6:71:63:76:f9:39:
39:6d:71:4f:7d:a2:9b:d0:09:cb:3c:bb:65:56:e8:
78:a3:79:26:b4:66:35:da:7a:27:70:18:c4:ff:53:
4e:69:cf:1a:21:62:dc:86:89:82:2d:ed:26:ac:a2:
65:4e:65:f3:2c:ca:45:c6:14:12:de:01:18:06:3f:
b4:f6:6e:ae:d5:e6:3e:40:ec:65:7c:88:ae:9e:a1:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:FF:44:1A:C2:C0:69:CE:D6:11:00:A4:09:94:44:BF:03:75:6D
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5c:dc:67:c8:7a:ea:64:c0:9d:1a:36:d3:1c:d0:aa:e4:b9:
7d:66:00:6f:18:e6:96:74:71:a2:e9:cc:ff:c7:f4:ad:4f:9f:
f5:6c:27:59:3d:ba:9b:50:93:3e:75:bf:34:38:50:c3:57:20:
8d:ee:48:3e:75:83:7c:0f:41:89:d6:12:64:57:06:19:4d:57:
ab:2d:74:ee:eb:36:2a:5a:ac:ab:bd:93:0e:53:c8:ee:97:ea:
1a:34:a6:66:cc:05:b2:f3:a2:49:4d:0a:b8:65:96:7a:d1:d8:
76:b3:53:9a:36:6c:68:6d:ba:6b:9f:d2:0f:a6:96:e5:b9:2b:
ed:6b:a6:b9:b9:a4:67:98:16:a0:4a:fb:43:7f:e7:9c:c3:1b:
ac:ba:6c:94:b5:40:f2:3e:2d:7a:db:6b:60:84:2d:c4:c5:1d:
7e:a7:11:a4:83:5f:72:31:90:e6:54:61:29:67:73:f9:11:46:
87:ac:8a:87:22:37:2d:e7:b3:4e:fb:3a:f7:91:a0:85:e5:36:
10:38:f7:f2:29:0c:16:19:5d:e9:60:7c:1c:3d:c7:d4:02:71:
fa:a5:45:bb:bc:b1:7f:46:e0:7e:25:c9:94:cf:15:8e:cf:0e:
fe:88:c3:10:d7:ed:7f:16:a5:84:2a:e1:83:77:4f:a9:c7:e1:
d6:a6:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 09:44:10 2025 by rpki-client