Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: n0M3lLZ4jlUdc1bXpKC525HrxpQ4unPLlN+1SjwF6rE=
Subject key identifier: D2:20:FD:AF:A2:8B:28:B1:42:FA:A7:EE:A5:EE:6F:83:07:D8:E7:33
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 0198439AAB82127E71D5DF1DAF5483D30C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1601
Signing time: Fri 25 Jul 2025 22:01:06 +0000
Manifest this update: Fri 25 Jul 2025 22:01:06 +0000
Manifest next update: Sat 26 Jul 2025 22:01:06 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: B68rBqTDh57Vzk4WwcCpnWfmIT4zAg5Osss9t7vLGfM=)
2: VGpF_n1XPkcrX19VIZfEe9zTBfU.roa (hash: ZCWW25MvdyoXZn5hf+wK4mNxI/epLix5Iz9z1Fs5NMw=)
3: o8N6mibH7HzRPfXSA-XguojRJmE.roa (hash: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:ab:82:12:7e:71:d5:df:1d:af:54:83:d3:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Jul 25 22:01:06 2025 GMT
Not After : Jul 26 22:01:06 2025 GMT
Subject: CN=d220fdafa28b28b142faa7eea5ee6f8307d8e733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:8c:2a:06:c2:71:0a:41:ec:d9:57:85:bb:
d2:2c:78:91:f7:1c:f4:a8:4d:c3:17:71:73:38:93:
57:b7:15:4b:f8:17:c4:f6:d1:af:c6:22:6e:b7:7a:
4b:7a:da:a2:b5:dd:43:df:28:8b:a9:dd:74:99:f3:
2a:aa:db:e3:6f:43:27:25:a1:da:dd:72:fb:a9:78:
e5:31:8b:a2:ec:1e:8d:83:79:8f:cc:b4:04:f6:08:
49:2c:9e:1e:af:56:a1:39:2d:52:5c:d8:2e:43:30:
1e:52:37:fe:bb:be:cc:f9:13:2b:ee:2a:28:b5:69:
26:a4:e4:5c:6a:8c:f8:cd:e7:d0:45:47:bd:98:a5:
8a:5b:49:1b:b4:b8:39:9e:94:44:26:ae:b1:f0:b4:
e6:17:eb:e3:2d:59:70:50:1a:4d:5d:72:eb:9e:14:
50:9e:52:2c:aa:ac:9f:57:e0:84:c8:f1:c0:07:77:
85:24:8a:66:7a:22:6c:eb:59:e6:be:17:c9:93:ed:
3e:be:7c:05:49:79:c1:01:7a:9b:d0:73:38:a0:6b:
76:b4:a3:77:0f:88:6b:d4:6a:ff:5d:5f:cd:79:46:
ac:ae:cc:49:0c:39:39:e1:c8:c6:7b:a7:d5:4c:c5:
3e:64:76:6b:a5:04:40:f8:52:e6:e6:b8:07:c8:6b:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:FD:AF:A2:8B:28:B1:42:FA:A7:EE:A5:EE:6F:83:07:D8:E7:33
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:55:aa:d5:e2:71:16:17:fd:9b:10:6b:54:28:29:56:d8:f8:
3d:39:97:8b:ac:63:bb:2d:e5:af:e5:ec:09:46:34:f2:9c:03:
14:e0:dd:cd:0d:41:1f:53:30:f7:cb:ba:2b:53:2d:7e:27:2c:
da:8b:be:58:69:42:eb:4b:fe:94:5b:90:49:a3:f8:89:a6:67:
34:9f:99:0c:0b:58:25:70:e7:6a:af:fc:88:34:96:b4:5b:c3:
2b:2a:2b:16:df:76:01:4e:f1:92:c5:04:44:fc:90:72:33:dd:
9a:81:61:51:2c:7d:9e:a6:80:c9:a0:ce:0c:3a:7b:fe:f0:f8:
8c:80:87:ee:51:ac:60:e0:c4:7e:90:f3:b3:c4:fc:e2:64:aa:
c9:1b:62:6f:27:e5:c5:de:28:fd:7e:16:6c:80:91:ad:78:48:
da:9a:89:2c:8d:5b:20:91:d1:b7:5c:33:fd:1d:b3:3e:18:1d:
1a:49:a3:78:95:30:71:93:ea:de:4d:02:a2:06:83:c8:ae:00:
72:62:a8:4c:d0:8c:ce:3a:8a:a1:c9:fb:24:b2:e6:ed:aa:dc:
40:70:19:be:df:e5:02:a9:7c:30:5f:b5:55:d2:8a:2f:3e:ab:
e0:43:3a:4b:ae:50:0d:58:66:eb:e4:53:4d:2f:3f:75:5c:66:
06:72:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:23:43 2025 by rpki-client