Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: eld8v/KdG6ZGTrMvtgJe2+W7qzpHUFBlOmwLDcFOOiI=
Subject key identifier: 05:57:FF:7A:38:DA:2F:56:7D:D9:FB:FC:4E:11:34:50:8B:00:81:4E
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 01984A09DB3450886D674374A6B2DAA14DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: XpZwxZYcycnBr5EsUL3N4JTSnLEuPk0F9A90Lrmsecw=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:db:34:50:88:6d:67:43:74:a6:b2:da:a1:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=0557ff7a38da2f567dd9fbfc4e1134508b00814e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:e1:fd:6b:dc:bd:f9:bb:67:68:2b:f8:aa:
27:d8:50:ff:0e:fc:84:ec:a6:9a:6f:37:e0:d2:57:
a8:36:90:7e:f7:2b:af:8a:02:6e:4a:b0:43:47:b0:
e5:32:b3:c8:a3:2d:22:2b:ed:b3:11:28:fe:7e:c2:
30:04:84:fe:82:7d:37:40:80:ee:8d:37:13:de:b4:
f9:75:1c:09:ff:70:53:d9:f5:01:da:46:b6:ef:3d:
7b:b8:35:e5:51:80:78:e9:aa:df:03:43:db:ec:48:
07:4e:74:7b:53:62:bf:2f:cc:6f:68:87:f6:1c:2d:
8a:bc:e7:f0:6f:3f:f9:ea:f8:75:67:16:66:4b:c4:
26:f4:27:66:84:a9:e3:a0:a5:c0:5c:78:af:b5:c0:
9e:08:59:d5:42:d9:19:2c:fe:5f:71:eb:62:b2:8f:
a8:57:bb:c4:a7:c7:a4:f0:50:03:6f:56:d6:3f:dd:
cf:13:02:aa:0e:21:86:19:e0:60:e0:52:16:9b:a7:
ae:7f:a6:73:5c:4b:bd:10:f4:f4:d8:39:6a:29:23:
29:14:00:ca:fa:8b:fb:6d:ee:11:dd:dc:b5:2a:9c:
ea:ae:22:db:31:dd:ab:d3:24:46:5c:29:d2:72:09:
03:5f:c1:1e:15:ce:ed:5f:7e:1a:ad:4b:64:d9:d3:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:FF:7A:38:DA:2F:56:7D:D9:FB:FC:4E:11:34:50:8B:00:81:4E
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:af:c3:ec:61:24:9c:98:32:f0:b5:eb:08:02:d7:58:81:4a:
94:de:63:20:e7:ab:4a:da:a5:86:f4:b2:8a:97:90:42:c1:c7:
3f:74:a8:02:86:1b:18:3b:45:93:7b:38:fc:9d:39:7a:93:9d:
f8:15:f1:54:f7:67:e3:c6:97:d5:de:ea:d9:1e:99:b0:1d:a3:
00:1f:b9:bd:78:1b:cb:86:9a:d5:bf:fe:c6:ed:f5:24:b9:e7:
ae:0b:9a:1c:dd:b3:6d:bc:a6:61:89:98:ad:49:95:31:58:fc:
e0:3a:ef:6f:39:02:34:c1:5e:7f:eb:07:34:bb:de:7d:47:97:
e0:b0:e7:ae:09:10:b3:67:8e:7b:55:ee:7e:2c:85:48:b6:14:
4f:f0:2f:20:d5:41:0a:c3:8f:69:26:30:78:e4:33:ca:be:7c:
5c:0e:e6:63:d2:68:9e:9d:aa:dd:09:55:8e:34:43:fd:07:89:
53:c0:24:5f:50:eb:0f:40:96:86:d3:bd:0c:47:61:49:10:ba:
f5:6b:12:94:52:39:00:82:2e:7f:f6:b4:20:f3:58:7f:aa:4e:
dc:a1:87:ed:a3:ee:96:b8:97:91:b0:a0:67:d4:94:94:a4:74:
5d:b0:80:0d:bf:2b:f8:80:20:d6:de:2e:32:2b:cb:41:7d:79:
5d:de:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:49 2025 by rpki-client