Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: YCjd3bcIrgAJpUJSkUTqRpyEFx0K0CHYLTfTKaxwx9w=
Subject key identifier: 05:2F:04:90:83:0E:87:4B:6F:2B:70:90:13:E2:4E:3E:F3:41:24:F4
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019842BE5F7A1F7226E26FDF1FD3931A5125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0F36
Signing time: Fri 25 Jul 2025 18:00:29 +0000
Manifest this update: Fri 25 Jul 2025 18:00:29 +0000
Manifest next update: Sat 26 Jul 2025 18:00:29 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: GvYncAUKDWOXEUXngDoP2A1+rxFby/5sdnHdOcp58FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:5f:7a:1f:72:26:e2:6f:df:1f:d3:93:1a:51:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jul 25 18:00:29 2025 GMT
Not After : Jul 26 18:00:29 2025 GMT
Subject: CN=052f0490830e874b6f2b709013e24e3ef34124f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:89:55:4c:79:4f:51:8b:4b:9b:f6:75:8c:
e9:2f:76:31:2a:a7:d4:62:ba:0f:70:93:a6:e6:f8:
8c:3c:2a:41:6f:d8:2b:6e:39:59:54:b7:be:82:8d:
91:b5:0a:5f:8e:36:c4:d4:a8:d3:2f:42:a5:26:d3:
59:c6:ef:b0:87:9d:17:fc:a8:af:73:7b:93:4d:44:
09:a1:0c:bf:37:2f:0f:f8:57:1d:5a:b9:71:fd:86:
91:1d:ba:c8:b4:a2:f2:35:5f:77:25:ac:30:71:0e:
35:10:3d:6a:ea:de:0c:62:32:e5:40:7d:00:85:ab:
5f:9b:a6:27:02:6e:e6:36:1d:9f:8b:c4:78:d0:8d:
b0:11:67:98:3c:13:cb:40:d5:f7:e5:39:c7:e2:42:
c9:c9:e7:c7:57:6b:26:47:19:7e:69:e0:22:c2:11:
90:65:87:35:11:61:57:c0:a9:3c:b4:c8:db:7b:0c:
9a:fd:d1:05:20:e2:03:b0:1d:2d:89:3a:8e:9f:2c:
28:d7:93:c3:86:f1:59:4b:1a:14:35:d0:47:cb:a9:
38:bf:28:d5:ed:3f:b0:4e:a9:73:e1:d9:ee:b5:02:
88:99:38:2f:6b:ab:40:e4:4f:89:bc:73:c2:e9:80:
71:59:ce:4a:72:0f:65:64:0c:61:c6:b7:9d:4c:35:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:04:90:83:0E:87:4B:6F:2B:70:90:13:E2:4E:3E:F3:41:24:F4
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:bb:68:fd:5c:14:02:77:6a:02:f2:8d:61:75:60:d8:35:
21:4f:7b:dd:85:33:52:ac:0f:cb:b6:0f:7b:0d:4f:33:21:12:
3e:3c:62:3c:0c:ef:9d:f7:36:45:d7:00:cf:df:bd:27:71:2a:
64:92:1e:5d:1c:7e:fe:72:f9:00:5a:6d:53:05:59:42:91:92:
a9:2a:f6:6c:c5:1c:2b:bb:af:bb:a4:6f:9f:fb:b1:42:23:6b:
60:33:ec:01:5e:32:4d:25:bf:6b:1f:dc:62:02:c4:e1:16:c8:
3a:a1:88:9c:93:d9:cb:11:f4:80:7f:61:d0:c7:8d:e2:f0:82:
13:2e:28:27:12:a2:39:86:e4:a7:10:52:d1:18:af:1a:23:1f:
8b:70:06:06:77:53:4a:7d:c1:b0:92:cd:6a:06:81:88:ee:3b:
20:3d:92:b1:9b:a2:07:06:58:e7:5c:71:8c:01:10:85:f7:72:
fa:ed:8c:42:e2:31:93:05:41:c9:2e:08:53:66:98:b5:a3:b6:
1e:73:32:ee:a4:62:83:40:69:53:d7:e0:04:ac:bd:c4:76:1d:
62:54:6e:3a:ef:c2:c1:97:5b:77:d7:a4:49:d1:72:89:e4:f5:
24:d3:f2:3b:4c:46:be:c3:1e:c8:e9:e1:c7:08:e9:69:e0:a4:
a6:ab:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:41 2025 by rpki-client