Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: A0sZ56UnLJQR5ZaL4GL6qRuCPNR9v2gBTi5z9YCQyuc=
Subject key identifier: 50:36:E2:FA:B3:E8:7C:42:30:97:16:CA:BA:07:F2:A6:CF:65:97:9D
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 0198496526CA3D8568E474AD5809D549CAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:22 +0000
Manifest this update: Sun 27 Jul 2025 01:00:22 +0000
Manifest next update: Mon 28 Jul 2025 01:00:22 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: sJmxb2SBCPz/73hPA4G85kv2xEszl4TUeDhksMBW5xY=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:26:ca:3d:85:68:e4:74:ad:58:09:d5:49:ca:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jul 27 01:00:22 2025 GMT
Not After : Jul 28 01:00:22 2025 GMT
Subject: CN=5036e2fab3e87c42309716caba07f2a6cf65979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:78:f4:66:71:c4:4f:54:0f:58:34:ee:b2:
a6:79:96:a2:ea:32:1e:93:32:6b:c9:82:ad:79:ac:
8b:20:d0:b3:2e:c3:e4:33:d5:51:ad:87:87:ef:e6:
8a:89:69:9a:44:f2:9f:c6:b1:ec:28:f2:6f:c3:df:
27:a0:8d:95:4d:29:f1:a8:a1:68:ff:81:9d:3a:e4:
79:2e:69:62:8a:97:25:c0:c7:2b:11:1b:15:1b:29:
cf:c3:4b:4c:83:39:05:dd:f4:e7:71:ca:6d:c6:32:
55:41:1f:f2:15:36:6b:67:aa:7f:31:c3:58:29:42:
30:db:0c:5f:78:fe:06:0b:17:b5:81:73:08:94:cd:
9e:fa:b2:c7:0b:73:c0:8b:9d:16:c9:8a:b0:f5:98:
37:00:71:e4:d2:af:21:ac:b8:49:fe:bf:fb:72:77:
fc:9f:b5:3e:09:9e:b2:7e:eb:f8:9f:c0:a0:d8:ab:
f2:21:be:c3:03:9f:a8:b2:4f:b1:2b:59:0b:e2:1e:
96:f3:f8:62:a7:04:b7:64:0e:0c:45:6a:34:54:7e:
bb:3a:98:8d:82:f0:25:4e:7e:ee:26:3d:f4:36:77:
f1:23:1b:41:11:09:d3:f6:d9:f4:97:f7:de:26:10:
a8:5d:f1:6a:b6:1f:3a:87:7a:6f:0b:98:cd:b3:65:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:E2:FA:B3:E8:7C:42:30:97:16:CA:BA:07:F2:A6:CF:65:97:9D
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a7:0d:52:ca:64:22:a6:3f:d8:d7:eb:f2:fe:e3:59:b0:81:
7c:c5:68:5c:37:e8:1e:e1:bf:9c:82:e4:8c:a3:3f:9f:b4:05:
02:f9:89:32:30:0e:44:4b:38:f9:23:1b:ff:9e:e1:54:6a:39:
9a:92:ee:65:67:c7:af:02:53:ef:ff:68:f5:02:11:6b:35:7f:
93:24:fd:52:66:6b:56:85:dc:91:35:f0:8e:1e:d9:5a:29:35:
d9:f3:c8:a6:5a:19:02:6f:1f:d1:2b:bf:c9:fc:6b:01:57:d2:
61:61:15:ce:20:5c:e9:39:6b:46:e1:bc:39:05:cd:4e:15:62:
95:0e:c6:a5:c6:fa:5f:d5:82:dd:59:d3:87:e0:2c:3c:a4:ac:
3a:37:06:c0:b6:91:be:e2:56:7f:68:c8:e7:3c:9c:31:cc:4c:
6c:9a:b0:4d:3c:73:01:90:95:31:b2:ea:fd:f1:83:a7:bd:c3:
ba:d3:2d:fd:37:86:0a:c5:c4:38:59:a7:da:30:e6:c5:66:f5:
62:21:1a:ce:df:95:d5:17:b3:cd:f4:ad:f0:e2:97:ca:2c:5b:
32:7a:4f:ac:7b:12:2f:05:b6:ff:11:45:a0:f6:07:88:6f:82:
e0:3e:19:95:f7:65:08:f9:a5:b1:59:da:a7:fc:f6:f1:ab:6e:
de:09:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:46 2025 by rpki-client