Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: Lh7YxYWpkMf2w8OsMWjCG8KTajteMgmu25tCOC6MDrI=
Subject key identifier: 41:AF:22:04:0D:6B:C0:19:F5:3A:DC:38:E7:67:C0:BF:A5:C8:A2:10
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 0198439AB6E4F01E1458167AB2F38005F3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1608
Signing time: Fri 25 Jul 2025 22:01:09 +0000
Manifest this update: Fri 25 Jul 2025 22:01:09 +0000
Manifest next update: Sat 26 Jul 2025 22:01:09 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: tYzZmYHJBZzGYizlfoUDBad3BSfKuy7TbVFBN5m9UqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:b6:e4:f0:1e:14:58:16:7a:b2:f3:80:05:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jul 25 22:01:09 2025 GMT
Not After : Jul 26 22:01:09 2025 GMT
Subject: CN=41af22040d6bc019f53adc38e767c0bfa5c8a210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:ca:0f:9b:8e:67:f1:3d:45:74:39:c2:be:
91:00:81:5a:ed:14:c2:40:28:ea:6b:a3:98:72:7c:
89:74:0f:14:14:7e:e3:40:58:3a:ea:08:34:29:91:
5a:6f:e1:d1:b0:ee:da:e4:95:05:8b:84:ec:47:03:
a2:7e:71:63:18:32:d6:e1:dd:26:b5:ce:42:84:35:
dd:99:16:50:09:f8:50:bd:7f:e2:c8:8c:68:11:07:
b3:e8:60:c5:0a:b3:ae:06:fa:37:0f:b5:6c:33:dc:
8b:f8:0c:61:28:47:56:02:37:13:60:ea:ad:12:2a:
48:ce:d9:5a:e3:28:c8:d3:f4:1d:76:04:8e:fd:e3:
0f:06:17:3a:b4:e4:eb:c1:63:6e:44:72:fc:27:12:
af:a6:6b:1b:4f:a3:92:1f:4d:2d:be:da:37:ec:66:
96:26:70:45:d0:67:25:7d:73:2b:22:cc:12:3b:b1:
37:46:f7:02:b8:3c:11:ea:f0:80:00:b1:09:2a:51:
3d:08:0c:7d:46:cc:6b:19:1d:19:98:b9:66:c3:91:
b6:ec:81:68:14:90:3c:3c:11:b5:80:0b:f3:13:eb:
12:72:27:57:d2:ae:21:c3:32:72:e9:c3:1d:98:78:
f2:35:12:b6:fc:65:ec:e2:7c:53:7e:f4:c3:b6:ef:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:22:04:0D:6B:C0:19:F5:3A:DC:38:E7:67:C0:BF:A5:C8:A2:10
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:45:8f:2d:e1:98:be:d6:08:6d:65:44:13:39:7a:14:37:8a:
58:b0:81:a6:d7:fe:18:a6:74:22:37:35:69:69:ba:98:97:d5:
ee:97:f2:51:29:19:ae:11:a7:ae:b9:ec:cd:43:1a:ac:44:33:
01:48:08:40:e0:7d:8b:ef:ae:e0:ee:0d:9f:ee:64:c4:14:fe:
a5:53:b2:63:fc:dc:dc:f1:7e:f3:2c:b5:fb:fb:14:1b:fd:e8:
45:50:75:00:dd:c8:9c:e8:00:a2:49:96:67:1b:99:b9:6c:6e:
f5:dd:23:20:89:cc:38:ea:3a:12:f1:dd:13:c6:bd:d1:b9:c7:
df:4d:6f:6b:36:b3:df:9b:a7:84:45:2d:77:e7:6b:d6:83:30:
b4:74:c3:43:c3:77:6e:36:6d:cf:f7:0b:a4:04:c0:93:96:2c:
0c:5f:94:17:fc:00:b6:2a:78:77:34:2a:0d:8a:99:5f:d0:a8:
16:b3:fb:b0:ad:e1:6e:c7:ac:30:ee:09:47:21:45:bf:41:17:
b5:bb:34:e3:64:18:49:fc:37:ae:32:cb:33:6b:0b:c9:12:56:
eb:6f:a3:80:1e:5f:c6:6a:8f:ac:fd:14:f1:5d:68:94:85:fd:
73:54:94:8a:85:e4:99:98:d6:0a:02:29:c0:e7:49:4d:6a:0a:
56:58:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:04:52 2025 by rpki-client