Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: AEbIXg3+4O7Ok6mLyPBY0CAugUNLQM0BWoUaFnd5oP8=
Subject key identifier: D1:83:0C:DE:43:48:15:53:2A:D3:1D:58:42:5A:D6:80:50:11:C9:17
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 01984DE6D72DFF4F1177A238A4D74F9BD1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 22:00:30 +0000
Manifest this update: Sun 27 Jul 2025 22:00:30 +0000
Manifest next update: Mon 28 Jul 2025 22:00:30 +0000
Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=)
2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: HNt5XAVd2SWGCuXkPQdx8cMSYH2PTQUCNFV41vI4Gk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:d7:2d:ff:4f:11:77:a2:38:a4:d7:4f:9b:d1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Jul 27 22:00:30 2025 GMT
Not After : Jul 28 22:00:30 2025 GMT
Subject: CN=d1830cde434815532ad31d58425ad6805011c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:8e:3c:4a:29:ff:9b:53:0c:0f:10:80:22:
5f:a0:3c:a8:ba:77:d5:f4:f0:ab:c8:bc:9a:e9:00:
06:4b:79:35:97:86:93:a4:79:3e:14:b1:c6:39:f0:
8e:43:2b:e6:ae:32:ff:cd:1c:69:7b:d9:09:b5:da:
70:4a:6e:1c:60:b3:7c:99:8d:08:6f:86:22:57:5d:
9c:e2:fc:2c:62:c7:ed:f7:a2:fb:0e:33:d2:16:7c:
03:50:43:bf:77:cf:9a:ed:41:ee:36:52:62:ac:6c:
96:c0:f5:cd:60:64:11:e6:fd:7f:eb:92:d9:c8:7f:
7b:6a:57:49:62:28:c5:9a:86:e0:ca:1d:0e:ba:56:
47:37:0b:15:57:4e:85:3b:18:4e:1e:3e:d7:16:5a:
9a:76:4f:df:6a:17:4b:3d:64:f0:c2:4d:4c:64:a4:
57:8c:06:b5:c7:81:33:47:c4:60:80:14:2f:24:31:
7e:71:d1:f1:c9:b2:64:31:2a:8b:9b:80:fd:fc:02:
36:f9:15:b2:ad:ba:8d:e3:e6:90:80:4a:55:b9:6a:
e6:5c:5e:7f:0e:cb:a2:6f:d4:23:c4:8f:c1:f5:75:
9d:3e:6f:46:d2:2b:93:52:1b:6b:48:f5:19:5a:38:
85:43:18:8f:c5:4e:2c:1b:f2:60:20:a8:47:ea:1f:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:0C:DE:43:48:15:53:2A:D3:1D:58:42:5A:D6:80:50:11:C9:17
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f9:cf:ca:a2:f9:ad:5a:ea:ee:80:d4:84:c6:78:e8:d5:d6:
db:db:ba:17:88:5e:15:d5:a2:79:97:0d:2b:58:b6:84:fd:24:
ef:8f:62:01:f4:6f:08:58:e4:0f:b4:5c:9f:2a:2f:5e:76:e1:
c9:35:0e:f1:d8:b0:b2:5d:d7:8f:c7:c6:6c:5b:d0:82:80:8d:
13:75:c6:61:0d:dd:5e:78:0d:98:41:44:b0:13:bc:ed:4a:ed:
1c:94:fc:d0:74:07:7f:5d:bc:6b:24:31:af:19:e7:3a:b7:be:
3e:81:dc:3a:25:5d:44:7f:67:e8:29:e1:40:01:4b:63:6a:06:
44:75:b7:85:9a:a6:a6:dc:a4:04:87:4d:3d:08:ee:66:6f:83:
d1:aa:f0:3f:66:a2:14:c4:0c:88:5e:57:df:b1:82:9f:72:ee:
6e:9a:1c:90:21:75:8c:78:12:6a:23:e0:3d:51:61:c7:0c:85:
aa:4d:53:1a:3e:22:14:4d:86:16:7d:9d:c9:1c:a6:98:3b:71:
08:88:fe:e3:f3:f9:66:ca:53:9b:81:64:24:f5:b5:7e:b5:5d:
6d:92:50:35:be:62:09:00:2e:29:bc:f5:c9:09:36:eb:d2:56:
ce:e5:6e:10:cb:87:18:00:14:0b:81:14:71:17:ed:9c:34:7f:
8f:2b:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:09:09 2025 by rpki-client