Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: sgZQ+WmF8IHj6wV4e7VwDYvHLJx21EZpEEE0Oev8nSE=
Subject key identifier: 90:72:AF:09:5D:49:52:E1:7A:4D:2A:EC:17:A5:04:01:B4:56:34:29
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019846D23F69EF3FD2164CABBB05A8FBAC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 13:00:40 +0000
Manifest this update: Sat 26 Jul 2025 13:00:40 +0000
Manifest next update: Sun 27 Jul 2025 13:00:40 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: WyqnyUnmEaTOSbV+0Ou8DN2atg9HmUT5bSy0LLZKy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:3f:69:ef:3f:d2:16:4c:ab:bb:05:a8:fb:ac:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jul 26 13:00:40 2025 GMT
Not After : Jul 27 13:00:40 2025 GMT
Subject: CN=9072af095d4952e17a4d2aec17a50401b4563429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:a0:a3:c7:b4:7a:f3:35:8d:1c:63:2d:23:
36:b9:c8:13:06:81:5b:27:24:15:e4:24:c0:07:83:
2c:0e:b5:35:34:c0:61:b6:d3:80:8c:13:f8:6b:f7:
7e:99:e7:68:71:18:0b:09:bd:3f:28:52:76:ff:95:
41:9d:31:13:6a:63:7e:ee:e2:0e:9d:a9:12:64:20:
1c:96:a7:fb:e0:fc:7a:6e:ac:63:42:77:54:1c:96:
3b:37:93:e1:8b:4f:56:4d:12:fa:f0:85:ab:d9:01:
64:ee:58:fc:cf:30:ec:d8:0e:2f:56:ba:a9:a2:54:
4b:a2:80:ad:a2:09:63:03:d5:c9:71:6c:2c:ff:9d:
af:b9:10:82:de:7c:7d:81:f0:d5:63:6c:f0:d8:1e:
69:65:85:e8:b0:44:7c:cb:73:67:2b:67:e7:ca:ea:
66:6b:74:f0:0c:cf:52:53:c9:d8:1d:ff:60:df:71:
a7:09:74:a8:fb:b9:01:36:8f:50:ee:31:db:7b:26:
13:39:8a:0a:7e:cc:e6:f4:02:32:1d:be:eb:fd:43:
b4:1a:40:c2:18:88:1d:ea:93:42:26:c4:51:fa:ed:
a6:bf:35:6b:3b:f4:35:5f:79:b4:94:44:00:0f:4b:
0c:8d:f3:d3:3a:97:b0:41:12:a3:65:03:c7:01:37:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:AF:09:5D:49:52:E1:7A:4D:2A:EC:17:A5:04:01:B4:56:34:29
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:95:45:81:67:58:9e:e5:0f:26:7e:34:e2:91:44:55:11:8b:
2c:5f:f7:f5:45:25:58:92:fa:b8:8d:75:9f:1d:cb:8b:2b:0d:
3d:a0:27:20:57:21:30:84:89:d3:7a:d2:d0:d7:0b:ce:f7:06:
a6:d0:fc:06:50:b4:e7:ff:ae:d3:0e:c6:7b:28:41:6d:97:27:
d5:57:1e:e0:7b:40:67:f6:b1:25:f9:9b:e8:2b:71:48:30:dd:
40:e5:48:ad:b1:56:f9:70:5f:48:d4:6b:c5:2b:26:dd:79:6f:
23:93:2f:8a:f3:f4:5f:5a:5a:6d:99:ea:19:64:a4:20:90:45:
33:f2:33:83:38:5b:43:65:90:3a:d6:c3:eb:ff:47:19:53:7f:
50:50:11:26:53:e2:ed:49:b8:a1:6e:41:9f:9a:4b:50:e7:28:
84:01:29:4d:53:19:74:34:98:3f:3a:0c:9b:bc:e5:f3:62:3b:
9f:30:c5:6b:3e:b5:a4:19:73:11:a8:f5:a3:4f:de:4f:9d:e0:
60:9e:5b:ca:a2:76:b2:aa:3f:84:91:59:9c:b9:4d:c7:12:0c:
0e:48:dc:6b:6d:95:d1:17:6c:85:04:b8:4c:06:85:61:db:3d:
bb:ca:d7:54:e6:bd:b9:9a:8d:a4:41:87:10:11:bc:c6:84:76:
a1:30:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:03 2025 by rpki-client