Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: XPpxyiteemi/912GwpWkH5QSHGifwvNYuXPuTfjJZOQ=
Subject key identifier: 67:D3:AC:FB:E2:ED:BB:FA:C0:EE:7F:0B:A2:FD:52:96:60:71:46:02
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 019843D10D0916B5DBAED0728D65455730BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 063F
Signing time: Fri 25 Jul 2025 23:00:30 +0000
Manifest this update: Fri 25 Jul 2025 23:00:30 +0000
Manifest next update: Sat 26 Jul 2025 23:00:30 +0000
Files and hashes: 1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: ZjyYHmr3xtm2PXE3/KopxlJtI0r7V9fcAQE7kWdbkJo=)
3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d1:0d:09:16:b5:db:ae:d0:72:8d:65:45:57:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Jul 25 23:00:30 2025 GMT
Not After : Jul 26 23:00:30 2025 GMT
Subject: CN=67d3acfbe2edbbfac0ee7f0ba2fd529660714602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:56:7c:71:a7:f8:f1:db:91:9a:ab:34:a8:
75:31:4f:3f:ba:ce:17:c6:ac:38:49:92:9b:47:ff:
69:2f:86:5e:11:36:f8:ea:4f:da:38:93:c2:d2:d9:
11:db:84:e8:7a:83:76:26:6f:c4:70:3e:27:8c:c1:
2e:4f:48:72:59:f4:e1:1a:f7:c4:b4:54:76:5d:56:
ed:2f:f5:fa:71:9f:78:76:7f:e6:17:9f:97:33:21:
1f:3f:4f:7b:e5:d6:96:5e:87:0d:74:af:e9:fa:60:
c4:0f:31:8a:22:3d:a7:63:00:5a:d9:c0:e6:28:b4:
d0:cc:d2:89:3b:88:18:49:47:8f:18:b8:00:1d:11:
8c:d4:a8:a5:f8:ff:83:51:d5:e2:2f:1a:f5:73:3b:
03:b5:3b:94:0f:c4:04:92:73:70:97:9c:bb:77:51:
7f:99:09:6c:ff:4b:88:8e:ba:d6:57:ee:0e:ba:71:
c1:05:e4:47:b6:ec:71:bf:37:06:bf:7d:6f:50:b1:
30:15:59:22:c6:72:f6:10:8b:21:35:2d:e7:00:ef:
ac:be:ff:8a:5c:5b:01:d0:93:38:5a:b7:50:ce:ce:
74:24:06:f3:37:90:8c:03:46:30:c8:34:59:1f:97:
3b:df:ed:46:93:be:48:03:ef:18:cd:64:40:d7:eb:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:AC:FB:E2:ED:BB:FA:C0:EE:7F:0B:A2:FD:52:96:60:71:46:02
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:ce:f5:c4:d9:8f:79:e9:6c:e5:0a:2f:a8:9d:db:54:02:
08:8b:be:ae:47:42:aa:53:22:06:31:f5:b2:b3:2a:21:84:99:
38:db:21:23:e9:2c:0a:cb:13:6d:0f:e0:a1:90:a9:64:b3:e2:
dc:de:92:ff:c5:97:89:e1:1b:5d:8e:24:97:af:ce:fc:23:01:
43:37:f3:5d:10:a7:73:4c:8f:47:21:0b:e0:c2:5e:83:f2:8f:
8c:8d:d9:5c:79:11:5b:72:40:bc:f7:11:ea:86:04:82:7e:6b:
98:f0:82:ab:46:55:85:71:00:bf:e3:a5:5d:3a:98:f7:5b:a4:
16:79:ab:bc:9b:73:bd:cb:fe:67:b3:df:48:19:1a:53:91:cd:
30:78:9b:61:57:84:8e:f1:f2:69:1e:33:04:6e:13:71:39:5e:
cb:b2:38:db:36:60:b3:77:2a:09:5c:3a:8d:07:21:fa:29:ef:
a1:05:6b:e8:d9:62:e4:ea:9d:3c:1a:0c:ce:09:27:79:19:11:
46:7c:88:66:18:73:61:51:14:11:db:8e:3f:b9:9c:d0:e3:1e:
62:51:ae:f7:92:5b:c4:f7:97:c3:ea:76:fe:55:ac:d8:4d:d9:
09:2f:5b:a9:f6:6b:46:85:18:d2:45:20:d3:5a:f5:0e:74:2c:
29:6c:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:46:33 2025 by rpki-client