Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: ZDt8q3JVtJYeCZo1t06tmyTSbbPnh9oDa+J2zcjz8Os=
Subject key identifier: 86:E4:3F:05:AD:36:A0:F4:A0:AE:54:02:E1:3C:E9:D5:72:B1:65:3E
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019923A078827EE794C933A54D3D0EBDBB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0538
Signing time: Sun 07 Sep 2025 10:02:23 +0000
Manifest this update: Sun 07 Sep 2025 10:02:23 +0000
Manifest next update: Mon 08 Sep 2025 10:02:23 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: lBOluJ9imyktQV2dz7jfqTLaIbtxUO00vfrQDYhtDes=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:78:82:7e:e7:94:c9:33:a5:4d:3d:0e:bd:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Sep 7 10:02:23 2025 GMT
Not After : Sep 8 10:02:23 2025 GMT
Subject: CN=86e43f05ad36a0f4a0ae5402e13ce9d572b1653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:40:8b:f1:6d:b4:db:41:04:bd:3c:ce:2b:
8c:7e:f5:f4:19:4a:c3:29:1e:a4:9f:d5:7a:c4:75:
be:29:c0:99:0a:2d:55:19:0e:48:7e:85:da:9e:45:
58:d2:ba:1a:7f:9a:7e:36:3f:ee:39:84:7d:e9:ee:
2c:ad:a5:85:87:3c:5f:9e:ab:6f:62:77:7e:5c:72:
8a:7d:96:c7:d0:d2:a8:4c:f0:6a:d6:87:b0:22:13:
37:fb:75:8e:f3:b8:23:eb:e6:f0:8b:a5:97:43:bc:
fb:99:f0:2a:b6:26:64:03:d5:cc:87:41:e2:b9:2d:
bf:5d:13:e5:16:a4:83:28:14:20:2b:8e:8d:27:e5:
9a:85:d3:1f:df:f5:0d:cd:86:82:c5:36:ad:84:ea:
fa:08:2e:9b:3d:f3:f2:6e:1e:80:88:5a:53:6a:61:
c5:7e:ef:94:d5:46:ea:fe:e1:53:d6:85:d5:c5:c1:
aa:99:77:f7:4f:5a:fc:99:7a:32:27:e8:f9:cb:19:
24:81:4f:99:b8:61:2d:7f:da:60:35:32:4d:a4:a2:
99:bf:c1:02:14:d2:32:16:6f:a6:ec:92:be:9c:62:
7e:99:ec:08:f0:71:8b:9a:0c:97:b4:cf:d0:f8:37:
a4:4f:43:e0:24:62:9e:15:d6:f1:ea:9f:f5:cf:e2:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:3F:05:AD:36:A0:F4:A0:AE:54:02:E1:3C:E9:D5:72:B1:65:3E
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3e:76:c1:50:80:ed:37:92:44:18:29:10:2d:98:8a:55:42:
3b:0f:71:5c:f3:ff:1f:13:f3:61:ac:16:3e:64:58:f8:6b:ac:
1c:32:5c:c2:ef:ac:52:29:2c:82:f1:96:b2:07:43:2f:ea:c3:
0e:82:f5:32:c1:5f:f2:25:62:64:b3:00:dd:ce:85:f5:53:6f:
9b:77:87:15:cf:40:0e:d0:09:d7:0f:1c:ac:a9:ea:a9:42:e8:
1f:c0:6e:27:58:cd:67:11:e8:15:38:65:0e:48:4a:43:35:4d:
8d:2a:48:3c:78:fd:50:f9:fc:e1:ef:18:d6:82:8b:1e:97:b1:
f3:18:89:b1:17:71:f0:41:54:4e:c7:82:33:55:94:a5:e7:ba:
c3:56:66:3a:b5:87:18:95:1b:d9:dd:ef:c0:9c:41:97:9c:7e:
64:f0:db:9e:00:af:6d:bb:3f:e0:e4:62:cf:7b:98:f3:d5:6a:
dc:b6:11:e3:be:3e:80:ac:eb:2c:59:7b:e2:ef:47:35:45:b4:
9f:75:71:c3:47:eb:55:36:06:02:79:ab:a9:d6:f7:c9:a5:fe:
e4:ca:9a:6a:91:fb:aa:6e:06:e7:2f:39:ca:d4:19:ba:24:7d:
00:d5:55:f5:2a:16:06:81:3f:85:13:be:bd:5e:00:ca:de:a6:
9b:af:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:01 2025 by rpki-client