Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: SgJ5eo4Pk23cQ4VGhHx3sFStkaPxJBkqSVyyb61+zuM=
Subject key identifier: 00:1D:D0:5A:DC:0F:49:B3:24:1E:8D:4E:80:FE:D8:61:64:EE:B2:91
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01984A09B0CE62990B7F692B9814C894D4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 04:00:05 +0000
Manifest this update: Sun 27 Jul 2025 04:00:05 +0000
Manifest next update: Mon 28 Jul 2025 04:00:05 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: y8aazvIJhxM3JpUIZ+OFozQx4rYMcQJ6a4pgeOH7wBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b0:ce:62:99:0b:7f:69:2b:98:14:c8:94:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jul 27 04:00:05 2025 GMT
Not After : Jul 28 04:00:05 2025 GMT
Subject: CN=001dd05adc0f49b3241e8d4e80fed86164eeb291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:c1:49:48:1d:bf:ef:cd:54:6a:a4:03:78:
ee:b0:1e:6b:d3:10:d4:1e:4f:70:b8:b5:7d:52:2d:
c7:fe:50:e4:2f:50:e2:9d:0a:86:b6:de:25:f5:1b:
5b:f7:da:22:7b:7f:0d:2e:cf:38:48:b4:64:1b:c6:
10:49:46:d2:86:d6:60:13:fa:2b:81:93:fa:7a:04:
b9:23:da:66:b7:69:2c:aa:9e:69:cb:5f:47:2e:4c:
d2:c9:61:62:50:5d:52:3e:b7:97:03:00:90:ac:46:
8d:0a:40:61:d2:d9:63:c7:34:96:ed:84:eb:df:9d:
f4:c2:9c:e3:36:87:39:18:7a:69:57:fb:31:c1:30:
15:69:ba:61:fe:29:4c:88:d2:a8:34:7b:0f:2f:a6:
74:3b:46:bc:cc:7e:e4:a6:e3:d6:aa:6c:be:fe:fa:
59:ad:74:0f:7f:76:ca:ce:bc:12:c1:4a:e2:94:47:
6f:3e:e6:ff:7a:2a:0a:3e:6c:9f:34:17:4c:96:db:
b3:6b:be:9d:2c:94:59:7a:ec:71:05:43:3c:97:e6:
6a:da:2b:6c:df:23:d8:83:b8:fa:27:87:82:4f:27:
cd:af:49:a6:ce:59:f2:45:45:8a:c7:19:eb:22:ef:
d9:21:af:3b:59:c9:95:57:86:5f:e5:4e:11:45:89:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:D0:5A:DC:0F:49:B3:24:1E:8D:4E:80:FE:D8:61:64:EE:B2:91
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:92:95:94:ef:36:d3:14:79:a8:5f:f0:6d:af:0b:a0:0b:
6a:0e:b2:46:1d:c4:b8:9d:9a:60:3d:1e:9f:32:ce:df:8c:61:
32:86:a9:8e:53:0f:59:9d:8f:96:8b:d5:1b:97:38:78:d5:69:
58:8d:b4:eb:d1:f1:1a:2c:36:8d:da:31:61:c2:9b:62:a0:53:
7a:55:00:c6:de:cd:fd:ae:a8:36:c5:4a:da:7c:ff:ba:e9:e4:
fa:9d:de:ff:07:8a:99:f2:61:95:e5:32:bf:b8:71:e6:8f:84:
d1:4a:d3:5a:8a:1d:52:28:27:a7:2d:37:c7:02:a7:01:a1:95:
9b:85:c4:59:28:90:09:35:90:bc:13:4b:0f:7a:5b:71:97:57:
3d:61:6a:de:fa:d7:ff:fa:d6:d9:aa:e0:84:cc:03:f0:fd:f5:
38:c9:4e:e0:00:a0:b6:dc:9c:27:ee:31:93:9b:c2:0b:12:ae:
89:1d:08:42:a7:90:dc:d8:4c:4e:cf:a6:0f:cd:ea:a7:0c:c9:
ef:c9:7c:20:9a:8e:c8:0a:23:a5:9f:35:99:e6:c3:fa:9c:17:
2f:91:1a:6a:a6:96:b1:34:91:1c:44:0b:6e:70:6a:76:a3:8f:
3d:97:fa:8a:2f:46:33:ca:29:aa:e7:63:43:49:21:e9:65:2b:
dc:f4:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:01 2025 by rpki-client