Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: EKJSRVSyINnaltmIzJX299UPTGFoc060FUdyHkKRSX8=
Subject key identifier: 6B:21:BF:3D:11:2E:DC:C1:7B:1E:95:1D:BD:0F:96:50:CD:A7:15:7E
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 01984965112E27D0973DFEBA71B03BC2CC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 03F7
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: jxCTsQmLqnOWn0D++fBG1laKS83t8pQF2Z7agkRaD84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:11:2e:27:d0:97:3d:fe:ba:71:b0:3b:c2:cc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=6b21bf3d112edcc17b1e951dbd0f9650cda7157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:6e:4c:10:0c:64:49:48:ce:7e:77:26:5a:
e9:05:cf:df:6a:df:04:0a:2d:68:87:f1:c0:8e:a8:
e1:a0:22:d8:92:50:14:2d:12:b9:8c:9c:b6:9b:3e:
8f:99:f6:3e:2a:24:09:cd:27:10:d4:2a:ed:07:06:
c4:17:50:80:3b:ba:16:58:e5:a9:9b:b0:88:ac:5c:
57:64:1d:d7:21:dc:95:f8:d2:e1:83:bd:81:ba:ae:
5d:bc:e2:54:3c:48:98:5d:4f:a7:c0:3b:6f:4b:d9:
22:ad:18:93:8f:08:91:be:89:aa:84:01:b6:31:a1:
93:f7:2b:e7:b3:4b:e2:83:c7:79:e3:c2:c9:f2:f4:
a4:cb:ce:77:81:b8:f0:83:db:fc:f9:df:95:d8:13:
d6:54:5c:c2:40:d9:f9:14:a4:a4:9f:a7:fc:35:2e:
f7:4f:df:fd:58:93:26:eb:d3:dc:a1:a6:cd:49:b4:
18:dd:9b:9b:e7:fe:3f:49:79:e9:c2:88:b3:ce:db:
8d:06:a2:40:51:10:76:7f:ec:f2:55:6e:1a:a2:58:
d4:7d:c6:47:79:69:dd:06:25:49:5a:2e:e0:7d:ef:
7d:cc:dd:39:64:c8:c1:02:a2:4d:53:b2:3e:c8:54:
18:cf:a4:af:00:75:42:c8:44:72:43:29:5b:3f:f2:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:BF:3D:11:2E:DC:C1:7B:1E:95:1D:BD:0F:96:50:CD:A7:15:7E
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:34:54:8b:0e:b4:0c:79:e8:a5:26:a2:d4:27:39:af:d9:58:
65:8b:b5:89:57:f2:4b:1e:6d:91:08:3f:ed:64:57:52:d9:66:
3b:0d:ab:87:a1:72:93:0e:85:45:1b:d0:a9:fc:9c:ae:7d:5b:
b7:51:e9:5a:6c:7e:ac:27:39:f3:72:a3:9e:a0:cf:c6:96:1d:
77:b5:51:2e:97:32:6c:43:f1:56:ad:bb:d0:6b:77:71:82:d3:
93:77:51:e3:95:68:c6:25:e6:36:2d:27:23:45:60:64:56:a1:
e9:ac:c5:17:df:e8:6f:4c:d3:45:12:7e:5b:fa:37:79:89:03:
38:63:82:04:37:98:2b:cb:63:25:5f:be:f1:ef:ee:a5:9c:bc:
9c:fb:0b:96:73:7b:63:8b:3f:29:05:87:d6:c7:05:f6:96:72:
27:b7:cc:53:db:7f:49:8c:86:a0:b2:17:55:cd:a2:f3:ef:46:
5b:f6:ff:9a:6a:9f:d5:13:28:9c:70:0d:89:e8:8b:75:58:e8:
45:20:9a:40:9f:92:06:dd:76:38:64:97:75:82:fc:d5:d7:91:
0b:2f:89:2f:af:43:57:3e:e3:98:2e:a1:a9:fd:ad:ed:b2:d1:
cb:53:f1:ee:85:87:2a:41:e5:60:52:41:c1:3b:01:d4:44:d7:
7e:0b:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:32:17 2025 by rpki-client