Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: lCVq61NqkAL/YiI497Rb1D7fVk8iu5vzOtvMrw3JQn4=
Subject key identifier: 75:C3:47:D1:44:39:44:A3:86:58:BF:D8:BA:58:71:F4:35:60:93:6E
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 0198499BDAB4912AFBEB1DB9845873FB3CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 02:00:07 +0000
Manifest this update: Sun 27 Jul 2025 02:00:07 +0000
Manifest next update: Mon 28 Jul 2025 02:00:07 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: NqKJs2tKnHnE2huvfPPaZopNHMZRYI6Gd6y4WdHEPUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:da:b4:91:2a:fb:eb:1d:b9:84:58:73:fb:3c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Jul 27 02:00:07 2025 GMT
Not After : Jul 28 02:00:07 2025 GMT
Subject: CN=75c347d1443944a38658bfd8ba5871f43560936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:47:1a:74:b5:77:27:9d:7e:31:1a:61:ba:
88:8c:10:90:74:63:e6:b6:b9:c9:41:7a:9d:62:0d:
ad:ac:c0:bf:64:08:a5:0a:79:2e:ab:2e:91:1f:2d:
c9:34:77:5e:da:43:e6:dc:19:68:7d:eb:85:55:17:
44:59:b2:8a:fd:92:5d:0e:63:2d:57:2e:26:a8:7c:
fa:59:24:a2:a2:23:2b:c0:65:14:29:fd:b8:d1:38:
74:ff:04:fd:cf:d2:8c:3e:20:cd:a2:13:41:69:01:
d3:18:0a:a3:c9:8c:df:f0:e9:60:31:b2:ee:80:cd:
0e:91:29:c2:b9:fd:8e:8d:80:d8:7c:07:f6:c9:43:
4d:17:00:16:45:d7:cb:75:a3:37:61:9a:cf:f2:c6:
03:f4:2c:27:0b:c5:3e:61:22:d0:63:3d:8c:01:a2:
26:93:5d:f6:9f:41:f4:86:e0:7f:22:fb:75:52:dd:
3d:f7:a3:39:1c:45:7e:4f:29:2d:67:da:87:74:38:
53:f0:e4:e0:2e:33:bd:73:0a:ce:ac:86:eb:19:f9:
52:53:05:1f:9d:99:1a:88:43:d7:89:77:4b:8a:ad:
81:6e:0a:1e:1e:bb:a0:f2:2f:3b:8c:5f:8e:a9:cc:
01:70:06:ff:43:70:85:06:b8:7e:3d:a6:99:cc:86:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:47:D1:44:39:44:A3:86:58:BF:D8:BA:58:71:F4:35:60:93:6E
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:05:d5:b0:6d:4a:ef:29:33:77:95:bf:d7:e2:0e:33:11:b3:
6b:27:98:f9:7c:23:78:77:8c:83:8a:47:70:c9:47:03:cd:a3:
fe:4f:03:76:76:43:03:d4:8b:6f:ec:35:6a:92:d0:ea:cc:11:
99:ed:3e:0f:36:7e:a6:c2:38:8c:75:5c:26:bd:5b:79:4e:44:
ef:10:fa:4f:33:77:ad:81:20:87:75:7d:78:2c:9c:8e:33:b2:
86:3d:56:ec:49:89:da:d0:43:6a:a5:19:2a:11:a4:af:e1:b6:
24:b6:b6:9b:cc:88:d0:23:83:45:3c:dc:f1:8c:56:c3:94:3a:
e4:74:35:13:1b:d0:d6:1f:88:38:9e:0d:e1:90:43:65:a7:82:
93:75:cf:a6:ec:e7:7a:33:9b:16:9d:87:83:5b:6a:08:40:db:
dc:1c:8c:de:38:b3:27:84:e2:8b:d3:53:e8:0a:97:18:9d:98:
2b:7b:ba:94:51:3d:92:aa:04:03:d4:bc:76:30:39:29:1a:23:
eb:c6:75:f7:ef:0f:c9:74:8c:9a:e3:0c:bd:d4:f3:ac:9e:d5:
2f:10:24:d2:33:63:60:67:f4:b4:1d:23:10:99:ea:1f:52:78:
a5:75:9c:ed:65:97:ab:7e:16:73:73:25:ab:82:19:f3:30:06:
cd:c4:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:28:10 2025 by rpki-client