Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: G0Bf6zUH2GQmGLOQnJSZAxZ7J4lHqVWb4nV4zNpB4y0=
Subject key identifier: 90:3F:30:94:6A:2A:37:0C:54:90:5E:BD:76:A1:20:C9:AD:49:CB:02
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 01983795E3F08A3CA10EF94B7B2CEF248152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 08C1
Signing time: Wed 23 Jul 2025 14:00:26 +0000
Manifest this update: Wed 23 Jul 2025 14:00:26 +0000
Manifest next update: Thu 24 Jul 2025 14:00:26 +0000
Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: UbI1xWU/o6P0HMNFVzVKD14z7Vlo11aEZJMeU9yhWvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:95:e3:f0:8a:3c:a1:0e:f9:4b:7b:2c:ef:24:81:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Jul 23 14:00:26 2025 GMT
Not After : Jul 24 14:00:26 2025 GMT
Subject: CN=903f30946a2a370c54905ebd76a120c9ad49cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:cf:19:dd:7e:e3:bb:94:24:34:53:59:b7:
23:20:b3:fe:1c:e9:7f:1e:2c:18:c8:1c:37:07:c2:
08:17:6a:bd:73:d0:db:85:f8:a8:31:1d:73:bf:8a:
91:23:49:d4:fd:90:d3:49:49:48:d0:cf:d7:a5:9e:
00:f5:b3:be:6a:cb:3d:58:d8:d5:67:b2:96:b2:b3:
96:db:70:f0:9d:eb:89:06:11:18:75:2b:ec:66:ef:
09:1c:78:9e:02:5d:4e:0c:a2:08:09:c6:87:ce:ed:
71:d8:e5:52:ce:0e:66:24:55:1e:b3:8e:85:c6:45:
ca:aa:fe:64:a0:0f:07:65:0e:16:72:7b:25:fa:2a:
ee:ed:b8:fa:75:d0:6e:a1:d7:b2:c7:41:c0:2f:b5:
50:95:11:78:34:07:78:0c:12:93:5b:53:be:0c:28:
d5:d5:ad:d6:16:fd:16:82:de:8f:0b:42:1d:78:8e:
23:06:d8:66:fb:39:e7:7d:35:81:7c:01:13:20:f4:
cf:82:16:49:38:da:a7:a3:21:63:e9:ff:a3:f6:4f:
34:e4:d1:d5:2e:3b:8d:45:34:54:f3:2d:2b:1c:a5:
fb:7b:d8:4e:c6:71:a1:d7:67:c6:1c:1a:27:8c:e2:
f7:6e:f1:6e:8b:39:9a:42:7c:25:f5:72:79:f1:4a:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:30:94:6A:2A:37:0C:54:90:5E:BD:76:A1:20:C9:AD:49:CB:02
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:18:6f:05:c1:b6:32:bf:3e:47:ca:13:cf:e4:98:d9:9b:23:
7a:c5:75:c7:e2:09:43:cc:74:c8:23:54:99:23:e8:f6:03:9b:
70:2e:9a:72:64:7e:a6:f5:62:b3:c3:14:f4:fd:77:d5:48:a2:
b6:7b:0c:a6:a3:3a:bd:2b:f3:20:d2:22:1e:2a:5e:42:ca:fc:
d5:61:c4:d8:4a:9a:e4:a3:43:6d:2d:3a:3b:40:5b:64:d7:ac:
b3:6e:4d:0f:68:cf:95:66:9d:ab:20:16:e6:fc:83:aa:d0:bc:
da:80:cd:bb:10:dc:41:3a:af:60:f0:6b:f4:13:7b:9b:bf:8c:
74:20:66:27:8a:ab:be:53:ab:41:4c:28:b1:20:3b:9f:cf:ab:
d8:d5:f5:0f:41:e5:6d:b7:48:55:14:26:04:ce:a2:78:3b:9b:
f1:d0:1c:72:e9:7d:9e:f7:99:06:17:eb:d3:f6:7f:b3:ee:55:
0b:36:03:07:b9:e2:24:53:ae:59:7d:4d:d5:a1:74:3f:26:a0:
7c:4c:7f:c1:bb:09:02:ac:55:31:1b:3f:27:18:34:44:6c:3a:
fc:ae:3b:49:f6:de:3e:23:64:91:09:fb:a7:57:2a:47:75:55:
e3:40:a9:1d:d3:dd:1e:54:f6:b0:8b:13:64:ce:27:0c:79:9e:
8f:a9:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:35:32 2025 by rpki-client