
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: /CceovDAb8L27cwOEnPTo/bcgwRSRiPQzmhqf8/8pZA=
Subject key identifier: 77:C7:65:94:1F:29:94:F9:A4:17:0B:CE:F2:F5:26:1E:6A:68:F9:1A
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 01985268718C93DA29B5A8EAB0A9AD81F287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 1517
Signing time: Mon 28 Jul 2025 19:00:33 +0000
Manifest this update: Mon 28 Jul 2025 19:00:33 +0000
Manifest next update: Tue 29 Jul 2025 19:00:33 +0000
Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: 8zLQH/eBh7DYeJpTE9q4oySEb32P8HHwc8NAQO1d8Z0=)
2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:71:8c:93:da:29:b5:a8:ea:b0:a9:ad:81:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Jul 28 19:00:33 2025 GMT
Not After : Jul 29 19:00:33 2025 GMT
Subject: CN=77c765941f2994f9a4170bcef2f5261e6a68f91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:c4:c1:a9:3e:c4:79:d7:db:7e:a7:9f:53:
a7:35:83:d0:30:80:32:f3:f2:5d:4e:38:85:b4:9c:
4d:2c:0b:f3:c7:1f:58:fa:63:76:2b:e4:20:28:71:
ef:1d:b2:55:62:04:77:87:6f:f2:d9:2d:51:f4:54:
64:6a:ba:52:33:e6:15:03:81:37:95:1a:7b:d9:50:
e2:84:14:55:23:8f:e9:cd:63:de:bd:5c:80:55:13:
f2:d6:32:66:a3:45:37:30:2a:b3:b2:af:63:29:f2:
da:bb:6e:42:c5:15:08:94:26:5f:47:3a:c5:5e:0b:
07:8e:87:9d:46:51:41:10:56:d9:bf:98:ae:72:f8:
eb:b8:5a:7a:54:ca:c1:bb:d2:e5:44:99:24:fc:ad:
76:e1:ad:a0:0a:2b:fa:2c:5c:ac:a6:20:45:6f:8d:
0c:41:fe:6c:fd:1e:c5:af:ec:c1:68:7c:39:2a:ce:
2a:01:da:9d:74:33:21:6a:39:88:5a:61:ea:7e:bc:
c2:bf:d5:3a:81:69:1b:dc:75:ae:13:0c:6d:a6:3c:
5d:ec:ca:ac:07:55:e0:d3:25:7c:50:99:15:56:27:
fd:62:bc:3a:d9:d0:6d:e0:46:4a:10:14:f7:d2:bd:
bd:36:59:f6:02:72:04:f7:bf:61:db:8c:87:5c:4a:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:65:94:1F:29:94:F9:A4:17:0B:CE:F2:F5:26:1E:6A:68:F9:1A
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b1:a2:92:80:3a:fb:b8:14:5a:c9:37:e4:e6:e8:7b:87:e1:
c7:6f:fe:f5:2d:17:18:8b:ef:e0:aa:ef:bd:fe:6f:cf:8c:14:
d3:95:14:ed:a1:9f:b8:ef:2b:af:03:0b:9f:6f:29:40:57:ca:
6d:33:cd:cc:09:ad:b2:ae:e1:02:60:e5:99:80:a4:24:d6:cf:
cb:ff:29:d9:33:17:0f:e1:4b:24:d7:66:e3:b8:69:cf:b5:3b:
44:fe:2c:74:d6:5c:f5:7d:17:d3:24:9f:70:a9:c7:0c:1b:8d:
70:bf:7b:c5:e6:1b:b0:4c:ce:0f:84:3e:2e:05:0c:89:10:23:
2a:2d:1d:e2:18:7b:7f:5c:68:16:2a:45:d6:e3:ae:32:10:e6:
3f:2b:16:f3:8f:3d:9f:81:43:50:89:ba:9a:53:48:26:52:f1:
84:ae:99:99:33:65:48:27:85:5b:e6:96:60:68:b9:dc:34:ef:
24:1f:3b:64:63:e6:00:88:3a:c5:4d:47:ea:d8:0b:3e:82:31:
a2:62:f1:ef:48:57:68:9b:94:1c:73:bf:74:ca:2e:51:97:ba:
aa:1d:ab:df:41:05:69:4f:a1:6d:0a:26:14:29:38:13:2e:52:
f6:ca:20:1f:49:88:20:6f:90:e7:78:1b:50:a1:9e:45:16:78:
a0:d2:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:42 2025 by rpki-client