Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: 3OwLQCQCAL6RAJLOdkdav8w+shfRXvNXjUrX7SOxh/I=
Subject key identifier: A1:47:4C:54:CA:E1:77:DA:03:62:9D:CC:45:D1:B2:51:F2:37:CA:FF
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 0198470911AFF4D0A0831B8D3A12AD2DD3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 136D
Signing time: Sat 26 Jul 2025 14:00:33 +0000
Manifest this update: Sat 26 Jul 2025 14:00:33 +0000
Manifest next update: Sun 27 Jul 2025 14:00:33 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: Y9fPcVXifaLBTMDvLtUpySYTOrwvNkAiy7fixZKHGAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:11:af:f4:d0:a0:83:1b:8d:3a:12:ad:2d:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jul 26 14:00:33 2025 GMT
Not After : Jul 27 14:00:33 2025 GMT
Subject: CN=a1474c54cae177da03629dcc45d1b251f237caff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:31:5c:ae:5e:3b:f9:79:7a:02:f0:2d:1a:
37:d9:84:18:03:45:e9:da:8c:00:64:a1:64:ba:19:
72:cd:e4:79:d3:ff:42:a3:2b:ee:04:65:86:11:c8:
ac:e8:ce:8a:be:fa:e1:6e:58:d9:c0:f4:0b:50:8f:
4e:1c:11:3f:25:9a:f5:1b:c1:0e:3f:ee:46:0f:03:
c7:1b:5b:3d:e7:9f:2f:a0:00:39:53:89:3a:9e:81:
98:03:f4:d1:14:64:a3:0d:f6:b4:5d:f5:94:40:3f:
b3:90:9c:e1:65:7a:0f:c8:f3:50:03:3e:6d:23:23:
dd:54:4f:a2:96:86:5a:65:ed:f5:f5:cc:76:21:93:
27:33:c3:35:d6:31:fe:0d:a0:1e:5f:ae:6b:8e:f8:
f1:5f:c9:a7:aa:9f:93:fd:b6:e5:fc:63:bf:b6:42:
2c:1e:0e:11:16:da:b4:e9:e5:c8:e7:a6:b4:6d:84:
0a:26:fc:d2:3e:e1:da:5d:34:bb:c6:f9:da:64:8f:
92:fb:5f:7a:67:ea:7e:26:c1:a9:64:b6:40:2a:b1:
d0:d5:83:c1:d3:d4:59:4d:a8:27:30:ff:cd:0a:96:
fb:de:d7:7a:35:8e:f9:0a:4d:b8:d0:3f:21:28:a2:
04:33:ba:81:bd:fc:5b:9d:cb:7c:86:7d:4b:05:44:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:4C:54:CA:E1:77:DA:03:62:9D:CC:45:D1:B2:51:F2:37:CA:FF
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:0b:77:0c:5d:3f:4a:75:2c:4f:8b:3d:05:ce:58:cd:d5:
cd:86:d4:a4:b6:42:3b:ed:66:f0:32:06:cc:39:0f:83:54:1d:
9b:5f:84:be:8b:1e:08:21:f6:3b:33:20:bb:8f:53:2a:df:cf:
02:60:1c:c2:35:13:35:f6:29:f5:9b:59:41:5a:6d:3b:23:7d:
7b:0a:f2:1e:1e:81:3d:df:2c:c6:58:0f:3f:f0:78:81:9e:ea:
43:d1:b0:f6:f3:99:b5:6c:4c:90:f1:d4:d9:e3:c5:05:4f:99:
13:5e:29:ec:a4:7c:61:31:07:7a:be:e7:74:3f:0c:77:65:3a:
a2:d8:81:a9:92:2b:65:18:ee:fe:a3:e0:cd:8d:a9:87:9d:ed:
b2:8e:9a:ca:05:0d:a8:38:77:2f:26:c4:fe:7b:f0:46:34:b7:
71:bf:c9:c0:cf:2c:ab:a1:2d:70:7b:4e:2c:d0:88:4a:12:f9:
60:c8:db:9a:3c:46:9e:90:fc:7c:4e:d5:91:af:38:0c:c5:39:
6e:fc:a2:0c:30:9f:ec:fe:24:88:be:30:f5:94:18:48:4d:95:
f3:04:09:ba:96:5f:d5:33:db:97:97:6b:f0:5c:02:51:7e:31:
b0:05:bd:36:07:63:11:76:96:16:49:87:10:70:5b:62:b4:e5:
0c:57:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:36 2025 by rpki-client