Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: Fe12tEtZPg5IKW+Uhrp595Qb4TWoVzEW/iK7rsSD5hM=
Subject key identifier: A5:CA:76:D6:79:A0:05:21:C2:94:14:C7:32:0A:F0:DE:CA:84:57:C5
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 0198499C56C285F8B821A0CED7CBBEC3F097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 0427
Signing time: Sun 27 Jul 2025 02:00:39 +0000
Manifest this update: Sun 27 Jul 2025 02:00:39 +0000
Manifest next update: Mon 28 Jul 2025 02:00:39 +0000
Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: 5OPo2wvB5G3BtRSAKCtlvwQ6l3hSqR2Q6nfF2VmWB6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:56:c2:85:f8:b8:21:a0:ce:d7:cb:be:c3:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Jul 27 02:00:39 2025 GMT
Not After : Jul 28 02:00:39 2025 GMT
Subject: CN=a5ca76d679a00521c29414c7320af0deca8457c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:a7:38:df:2c:8c:7a:5e:12:54:15:e1:14:
76:3d:12:4b:aa:4e:69:bf:66:1a:6a:ff:84:6f:75:
f0:98:5b:3e:6f:e0:94:9b:d3:e7:66:24:7f:3f:d4:
09:e1:70:43:ac:79:94:bd:29:ab:ee:59:30:de:33:
df:a4:1b:22:22:5f:38:d1:3e:c6:e0:55:32:9c:69:
17:39:49:ea:8a:a5:5b:e3:7b:96:52:54:2d:78:0b:
69:bc:c2:44:5a:72:a0:b3:d2:d2:a0:48:19:e8:8a:
25:2b:06:a5:2b:d4:42:e6:40:2a:e4:6d:de:87:78:
fd:f6:b3:a0:d3:77:5d:9e:8e:0b:b7:32:e0:51:58:
53:61:62:47:b7:f7:a8:34:35:5f:62:d4:3b:42:ad:
f5:c3:05:a1:a0:e9:bc:67:14:b4:32:e3:73:2c:64:
0e:c5:e4:5e:e8:2b:65:36:82:9d:c0:9f:a9:09:11:
55:40:f6:17:77:46:0e:e3:29:05:34:1a:56:73:68:
3b:be:1d:19:4e:5b:86:07:c7:a1:7f:c7:e1:e4:64:
71:e4:b9:b0:64:36:93:02:6f:c1:56:96:5a:ad:70:
43:20:e1:f6:31:33:bc:4d:57:72:21:59:fc:d2:f3:
5b:bd:1e:6e:c6:d3:c2:2b:e5:70:66:cc:c2:91:f4:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:76:D6:79:A0:05:21:C2:94:14:C7:32:0A:F0:DE:CA:84:57:C5
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:a5:c3:55:36:04:ba:ff:04:55:ec:c6:0f:24:1e:cc:1e:
3d:2c:72:57:7e:02:17:cc:5d:4f:aa:e8:dc:64:fb:52:8a:6b:
22:b4:b6:35:67:bc:9d:50:e1:cb:d8:65:3a:55:4d:02:a2:b6:
9e:e5:78:4f:de:20:26:11:c9:ee:f7:e5:b0:af:2e:ae:92:26:
d6:1f:2a:c0:05:28:84:e3:b4:c6:b2:16:d4:f8:c1:62:2e:2d:
a7:ff:71:8d:a7:10:e5:c3:8b:4a:d7:44:84:03:df:f0:01:28:
d0:e5:7c:8d:47:f6:af:61:cc:10:03:98:bc:04:f4:54:28:f2:
e7:29:e4:13:b9:e1:5c:01:59:fb:47:b9:2c:98:94:f9:99:ec:
32:a0:42:a0:b2:d9:74:56:6d:d5:ba:00:11:db:8a:6e:cb:83:
88:5b:99:0f:de:d7:21:29:cf:42:cf:24:d8:74:39:77:cb:d3:
c6:f7:07:ed:6e:cc:ff:d1:88:98:02:17:cc:b8:23:55:84:c1:
b8:c5:d8:e8:91:22:e5:3e:16:51:48:cc:1e:02:a1:17:7e:e8:
91:f2:32:25:b9:b1:a4:74:db:45:80:50:79:81:d9:2f:82:a5:
55:06:c6:7b:26:37:f1:35:d0:b2:91:4a:a3:49:22:51:32:9d:
b9:11:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:00 2025 by rpki-client