Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File: jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier: 39OUxERSNroBsNCY335rvlaMd1pV2GEiEeuWSI/T6k0=
Subject key identifier: AF:22:FE:6D:90:A0:2D:93:7C:AE:58:06:9F:3C:21:E2:93:11:39:F3
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial: 01984A416AAE525BF3DA61BB9764C88D9381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number: 12A8
Signing time: Sun 27 Jul 2025 05:00:57 +0000
Manifest this update: Sun 27 Jul 2025 05:00:57 +0000
Manifest next update: Mon 28 Jul 2025 05:00:57 +0000
Files and hashes: 1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=)
2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: LvZaTfttxCq5tmynNsA0DL50+VvuDlo7UfarVQQ8Msc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:6a:ae:52:5b:f3:da:61:bb:97:64:c8:8d:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Validity
Not Before: Jul 27 05:00:57 2025 GMT
Not After : Jul 28 05:00:57 2025 GMT
Subject: CN=af22fe6d90a02d937cae58069f3c21e2931139f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:87:c2:da:c0:b5:96:14:3e:a6:b9:71:dc:
a2:49:57:de:98:41:57:6e:c8:04:e3:8f:b4:3f:dd:
e9:d9:5a:da:44:93:5f:e3:89:91:46:f9:83:a0:e4:
38:37:72:26:73:88:bb:b5:72:6b:bf:16:53:b3:f2:
0e:f5:e7:5c:9f:34:24:86:63:71:e6:c1:02:05:f9:
59:a6:34:06:28:ee:8f:e5:36:a8:d7:b1:f1:e0:41:
ae:86:f5:82:0d:76:d5:97:7e:25:2c:6c:37:83:ef:
4f:94:69:f4:5c:09:ea:7c:33:ad:aa:79:aa:3b:fd:
a5:0c:15:9a:f9:26:7b:81:20:21:01:a6:ac:3b:4e:
55:47:d7:c6:e4:8e:ec:fc:4f:ab:bd:50:ad:05:2a:
8e:e3:d5:4a:48:7e:39:86:d2:9d:24:ce:6f:10:ea:
7c:11:8b:e4:1e:35:86:9b:e1:7f:99:47:9c:9b:35:
0c:22:84:db:99:50:e3:42:1e:52:b4:57:59:c3:79:
92:da:a3:57:8d:f4:0a:96:df:c6:4f:9f:50:70:ec:
96:58:98:97:17:b1:9d:1f:82:34:76:37:ed:36:92:
42:63:01:7e:b5:ee:66:81:a7:c0:74:51:1e:b4:ec:
67:26:9b:22:00:b0:73:75:9b:55:e7:de:d8:21:02:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:FE:6D:90:A0:2D:93:7C:AE:58:06:9F:3C:21:E2:93:11:39:F3
X509v3 Authority Key Identifier:
keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c7:41:78:46:2c:19:f1:93:a2:d9:dc:41:67:38:3a:0f:38:
de:f9:87:3a:6f:f8:e8:ca:65:e1:49:86:7a:c7:b3:33:a3:56:
2e:73:a0:24:93:c1:c9:0a:b7:01:db:4b:5a:ca:ec:1d:99:90:
b2:a6:13:9b:61:9a:cd:22:6c:6f:7a:eb:58:d9:63:cd:66:ce:
35:4d:2f:ca:88:0d:eb:6c:e1:33:41:90:6d:45:23:2a:b8:ba:
83:8b:4c:dc:0e:be:94:d0:8e:92:1e:a0:88:10:44:45:6a:92:
e7:e4:d5:fe:88:cd:a6:c9:cb:18:c2:ec:6c:7f:0b:d3:b5:1b:
12:24:e0:8c:b2:cc:77:b8:3c:5d:f2:da:69:de:87:13:7a:ef:
82:16:73:0e:0a:05:6f:a9:20:5e:6b:d5:8c:c7:d2:d5:29:f3:
40:fa:10:74:83:fb:a9:8d:fc:4d:9a:59:a5:1d:99:c3:fe:31:
3a:5f:55:5a:35:d1:aa:e6:cd:d9:68:2c:89:16:7c:8f:ad:42:
86:2e:12:cb:df:10:dc:3a:f2:75:0d:9b:1e:ad:1f:dd:79:f4:
f4:0b:2e:73:63:10:e3:50:cc:12:79:cc:d1:08:f0:23:a1:33:
44:67:18:a1:d6:e8:77:e0:82:8b:01:01:e8:5a:7c:ca:2b:2d:
4f:d2:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:33 2025 by rpki-client