Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: 6SF6/nGJxn65+kIwGrhc/1i1BL2LiZqsN0v9e4hQOhc=
Subject key identifier: CE:47:B2:9C:B7:24:89:22:52:68:31:D9:98:09:FE:A5:0E:09:B1:62
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 0198499C6699C72729A92E7EA1EE4C0AAC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0AFE
Signing time: Sun 27 Jul 2025 02:00:43 +0000
Manifest this update: Sun 27 Jul 2025 02:00:43 +0000
Manifest next update: Mon 28 Jul 2025 02:00:43 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: xaY5xF2cyer+inUEDtc02N7dlKcu+02qZ7Tfm4tm8P0=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:66:99:c7:27:29:a9:2e:7e:a1:ee:4c:0a:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jul 27 02:00:43 2025 GMT
Not After : Jul 28 02:00:43 2025 GMT
Subject: CN=ce47b29cb7248922526831d99809fea50e09b162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:5b:ae:b3:b4:33:9e:66:12:fc:83:33:2a:
12:bd:69:f7:84:b7:8a:9a:cd:ce:79:70:cc:17:c1:
50:11:00:f5:cc:e5:31:cf:4f:8f:d0:a6:3f:00:0a:
b8:98:bc:b0:c8:fb:26:0d:03:f4:7d:d3:4f:4d:86:
c9:66:e2:25:e8:bc:64:5e:6f:f9:46:b6:60:01:9d:
65:05:2b:f1:e5:53:b8:5c:71:ef:4c:9b:c9:98:29:
f6:dc:f7:23:3d:d3:3a:9b:ff:ef:52:55:4c:d8:a3:
2f:ae:4f:29:14:83:34:0a:e0:93:8b:ae:c0:e9:78:
8d:19:2f:38:00:4a:0c:5b:8a:d7:39:67:d4:43:f3:
2a:bf:f3:ec:8f:1c:98:f9:b8:72:78:05:ad:4f:af:
fe:b9:93:c3:65:22:48:b6:e9:7d:ce:9a:cb:e3:16:
5b:3c:d1:d2:eb:ed:e4:35:9f:4a:4a:b8:83:7f:f9:
b3:e0:94:53:bf:ea:33:9c:12:38:df:1e:89:f4:51:
97:d6:f3:94:8c:4f:5e:3e:fa:a9:5f:24:47:66:09:
4c:78:b4:0f:97:94:5d:73:c5:13:4c:14:0e:0a:fc:
9b:a9:00:75:52:06:d0:f4:4b:ef:75:ca:b6:54:34:
75:8d:53:b9:71:1a:fc:c7:47:79:8b:85:85:b2:a9:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:B2:9C:B7:24:89:22:52:68:31:D9:98:09:FE:A5:0E:09:B1:62
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:68:6c:08:ac:18:03:bf:f1:2b:ba:93:c1:93:8b:83:99:e3:
b1:f0:a7:f2:49:ae:2b:45:5a:66:99:c7:77:13:09:ff:f7:90:
92:38:bc:87:40:34:8c:c4:42:60:30:6d:82:9c:f2:97:4d:a0:
96:56:bf:e3:9e:8f:08:0d:0c:12:e0:2c:db:cb:db:48:bb:93:
cc:46:0b:15:6c:6a:14:04:3e:c9:a6:4c:eb:03:03:ea:da:9c:
13:70:c0:9a:96:a1:e4:01:11:44:ad:cd:66:f5:74:45:44:db:
2e:a2:e7:e4:03:9d:42:b7:07:cf:c5:8a:87:f0:f6:e2:73:b9:
c8:6e:d4:fb:89:dd:f3:d0:d1:73:96:23:c3:8f:ce:fa:c2:d5:
c1:08:f5:7b:89:9f:92:05:a7:ec:ac:0f:dc:98:de:03:fa:6e:
8e:8c:92:0c:da:16:61:5c:62:9c:3c:a0:f0:e8:57:95:86:7c:
44:86:2d:34:82:f9:24:0c:4f:65:6b:f3:ed:a5:98:67:2d:43:
cd:fe:60:eb:4a:9c:36:24:d5:16:55:b0:ae:b9:ee:c8:d3:5d:
20:67:68:b7:8f:94:fa:fc:48:6d:63:5b:57:6e:70:14:60:0c:
20:35:08:a3:95:73:86:61:f5:1f:8c:f6:5a:ce:6f:49:bd:85:
16:89:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:56 2025 by rpki-client