Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: +6FLG9bAY5+zcRCTOqUD+2Wf2IRZQ1t1mcB2G1BvZx0=
Subject key identifier: 85:79:DD:BD:B5:B7:80:BE:A6:B9:6F:37:32:62:01:2D:63:D9:77:C5
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 01984966431F744A259012E5F897C32C6D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 051E
Signing time: Sun 27 Jul 2025 01:01:35 +0000
Manifest this update: Sun 27 Jul 2025 01:01:35 +0000
Manifest next update: Mon 28 Jul 2025 01:01:35 +0000
Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: CB3w6rN55frr2CVAjTN30/sHvavI9KrRc19vs/qiBg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:43:1f:74:4a:25:90:12:e5:f8:97:c3:2c:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: Jul 27 01:01:35 2025 GMT
Not After : Jul 28 01:01:35 2025 GMT
Subject: CN=8579ddbdb5b780bea6b96f373262012d63d977c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:49:75:c4:96:41:cb:e1:f9:f5:ef:b9:a8:
53:d8:e5:fe:4a:e1:90:02:0a:18:ee:45:27:02:b3:
22:f1:2c:60:dd:30:da:72:d3:ae:8c:17:18:35:f3:
4d:14:a0:f1:a2:fa:11:58:d9:60:03:5d:3d:e4:2a:
75:c4:13:55:80:14:6a:f2:74:4c:84:64:2e:11:d3:
de:38:70:95:a2:3a:96:c9:c2:28:95:4e:3b:60:1d:
11:4a:19:93:f5:b8:9a:88:c0:0c:89:85:41:46:71:
cf:ce:21:6e:d3:5c:5d:23:cf:ad:59:a2:c2:2d:fc:
e5:dc:10:2c:2f:2e:fe:d7:74:95:0d:ce:1c:48:61:
85:45:f8:78:15:8f:01:85:00:a5:2e:99:f0:1d:d5:
05:b0:64:a2:07:5f:45:1f:a6:2b:ae:96:f8:a7:fb:
42:aa:8e:8a:87:7d:d0:df:47:d6:d3:fc:2e:1d:9c:
ba:46:a7:75:4e:b2:c9:dd:4e:40:2a:8c:bc:c3:a3:
93:3f:b8:76:cb:87:8f:96:05:bd:dd:9a:bd:8c:0d:
8a:cd:0a:45:e0:d4:9c:e5:56:90:fa:18:a7:e0:45:
87:90:81:dc:16:27:aa:5b:94:a9:bb:32:87:2b:df:
7e:e1:db:46:5b:5c:2d:da:45:71:07:49:38:30:a0:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:DD:BD:B5:B7:80:BE:A6:B9:6F:37:32:62:01:2D:63:D9:77:C5
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:f3:86:b7:1a:ca:5b:76:64:2a:cd:8e:f1:c2:6a:a9:f5:
8a:a3:d9:75:3d:2d:bc:22:da:42:a4:fc:0d:f6:76:19:84:dd:
4c:33:58:9a:3c:b8:3b:1c:eb:4b:d5:1c:08:7b:63:ce:03:5a:
d9:ed:ea:f7:35:54:36:dd:a0:24:5c:f9:1a:27:b1:3d:07:c5:
14:a9:cc:ad:c0:8e:8c:ef:5c:14:c9:a7:76:dc:d0:ab:88:5f:
40:88:33:8d:c1:2c:d7:44:28:d1:eb:3c:ad:11:24:f4:e1:e2:
9e:b9:5a:09:1c:62:aa:d5:5a:d3:bd:e6:22:70:7b:86:95:c4:
e8:5a:df:0f:b9:85:83:21:f4:dd:51:1c:a9:d4:52:55:37:b0:
48:55:c7:a0:9c:af:3f:f4:cb:61:6b:1e:b5:0c:9a:26:06:be:
91:84:66:ed:47:98:d9:43:2d:90:4d:7b:1e:6a:3a:cd:8c:ec:
b4:a4:1b:d4:43:11:7a:ff:67:2e:f1:93:a5:27:9d:0e:7b:38:
bf:e4:68:9c:5a:1f:69:28:1c:22:2e:11:85:b4:41:5b:3a:03:
bd:c2:61:06:e1:00:01:1e:75:a8:ec:3b:7e:dc:ed:28:fa:31:
3a:fa:f8:da:c7:a7:72:5f:f0:eb:2e:b2:a8:15:db:30:c7:92:
e0:88:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:37 2025 by rpki-client