Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: PmXhZ5zcP9sn8y0P6GLKb1iXRBr2XgvzZ1ZE+/CXRrU=
Subject key identifier: D6:D4:E5:6D:BD:44:EC:54:0F:0F:DD:51:15:F4:2B:6A:82:40:3E:C7
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 01983E05FFE84E908C27F0963135CF45E31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: 0349
Signing time: Thu 24 Jul 2025 20:00:37 +0000
Manifest this update: Thu 24 Jul 2025 20:00:37 +0000
Manifest next update: Fri 25 Jul 2025 20:00:37 +0000
Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: utV6lGXugCubY4eK4GiDZkF7FeHB021FRYu+QgsGNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:ff:e8:4e:90:8c:27:f0:96:31:35:cf:45:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Jul 24 20:00:37 2025 GMT
Not After : Jul 25 20:00:37 2025 GMT
Subject: CN=d6d4e56dbd44ec540f0fdd5115f42b6a82403ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:c9:a7:65:57:fd:3a:5d:8d:7d:31:26:b4:
b4:d0:cd:eb:67:30:b1:78:1c:6d:81:7a:4b:6a:b5:
b1:0b:7c:d8:9a:e5:c6:3f:47:7c:f8:90:f8:6d:66:
3e:a1:01:8c:b4:ff:13:a3:81:44:28:83:00:4e:0e:
00:4d:62:09:45:95:2e:c2:a0:9f:c9:72:16:f3:48:
42:2c:e2:1c:46:92:b6:f7:ac:4d:87:b7:7f:c8:e3:
e5:75:9e:0b:a9:70:c2:74:9e:8a:84:88:03:ab:62:
49:26:65:cf:df:30:fa:96:03:5d:92:a6:02:76:20:
cc:24:3d:0e:dc:3e:d3:41:e3:b7:73:11:7a:46:7d:
26:7c:02:03:35:de:b8:ba:82:45:07:1c:06:30:05:
3a:c9:b0:e9:10:de:8c:03:15:dc:35:e6:f8:66:f8:
80:05:c2:cb:73:64:e8:8a:bb:f5:11:4a:9b:19:f6:
e1:d3:4a:88:34:c5:62:16:32:6e:db:1e:c4:ef:36:
dc:77:ad:46:30:ea:9e:c2:3f:e4:ed:ed:69:37:17:
23:2a:cd:53:60:5a:4a:bc:43:91:68:95:a0:45:90:
d5:5f:2d:49:ca:02:2a:d4:a9:89:e7:20:55:10:16:
41:0e:19:fe:f2:ac:28:9e:fb:5e:dd:1a:34:45:92:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:E5:6D:BD:44:EC:54:0F:0F:DD:51:15:F4:2B:6A:82:40:3E:C7
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:31:8f:ae:f1:eb:1b:c8:1b:3e:3e:33:10:3b:67:73:74:
b4:46:43:c4:56:94:84:d0:94:14:fe:94:1a:fa:2d:02:57:26:
ae:78:d5:ba:38:a6:8b:ff:06:f9:19:73:16:d3:29:d1:c8:91:
64:9a:a4:3b:04:77:0f:d3:44:df:8d:f2:a8:e1:91:4c:42:86:
7d:3b:66:37:f7:bd:d1:0d:e8:b8:af:7f:86:8b:00:0d:30:5d:
34:2b:41:3c:6b:6e:4d:73:6c:71:f1:45:6a:30:c3:67:aa:d9:
46:42:ae:f5:8e:da:14:01:85:69:fb:ab:1a:24:bb:b4:2a:d7:
4b:1c:60:9f:17:aa:b2:a0:86:62:f6:c1:32:e3:58:6d:e5:f1:
fb:9a:75:50:bf:92:38:80:74:d8:3f:42:17:4c:f3:fd:ef:2e:
4d:96:23:6d:08:d8:40:08:fe:21:c9:86:96:83:48:1f:4d:cf:
ab:f6:11:10:80:ad:85:3f:dd:2e:b0:b2:a3:14:03:86:b2:a7:
e9:4a:9e:f1:92:71:6c:78:91:e7:9c:15:b9:0f:82:f7:08:d6:
1b:3b:6c:a7:fa:fc:7d:84:c8:b0:24:d1:43:a8:a3:68:ee:22:
b5:74:19:1e:07:df:19:cf:0b:a7:4f:a2:d8:2d:c2:0d:b3:93:
f4:0a:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:32:57 2025 by rpki-client