Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: KwK9kJ501GNbK2zrRefLd2rv/nrmfJBvOdPgukhI67U=
Subject key identifier: 65:0C:3D:88:36:C3:08:B3:64:79:64:43:8D:98:3A:BA:7E:5E:1B:39
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 01984475C4E0FF93FC217B96907C55165693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 160D
Signing time: Sat 26 Jul 2025 02:00:25 +0000
Manifest this update: Sat 26 Jul 2025 02:00:25 +0000
Manifest next update: Sun 27 Jul 2025 02:00:25 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: /4XwheM800jVXa3hUK0jOwgz9seWlTVdHnwUdUQtvHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:c4:e0:ff:93:fc:21:7b:96:90:7c:55:16:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jul 26 02:00:25 2025 GMT
Not After : Jul 27 02:00:25 2025 GMT
Subject: CN=650c3d8836c308b3647964438d983aba7e5e1b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:b5:90:e5:4f:f3:9d:02:ea:c6:d3:8a:ce:
5f:82:64:90:52:73:65:7a:9d:19:18:3c:5f:65:94:
0a:38:27:f1:7f:79:33:ed:0e:aa:f2:bd:64:1b:ba:
e2:77:80:3d:95:f2:94:f9:2e:b0:39:1b:1d:05:c4:
8b:93:b1:de:57:7d:04:4f:6b:93:10:df:f4:fc:69:
07:c5:48:ec:6b:0f:46:10:a9:26:05:27:56:8e:be:
f9:c7:85:de:7b:5b:33:52:90:4d:7d:f3:e7:0b:0f:
02:c2:9b:5e:2b:3e:7d:14:0e:9e:45:0a:d2:0e:1d:
32:c8:2c:c3:a8:5e:1c:57:28:d0:a6:b8:f2:44:0f:
7a:47:fc:f6:c4:a5:ec:b9:44:e0:ed:0d:98:8b:4a:
8e:96:54:09:dd:99:a8:7f:d0:7b:e6:02:28:b8:d7:
30:ed:fe:b3:50:81:09:a0:19:30:56:f8:03:61:aa:
b6:d9:8d:54:f9:06:c5:1b:08:8f:54:e9:f0:01:8a:
ad:48:1f:e1:5c:b5:6b:b7:e8:14:31:59:bc:3f:85:
e2:ab:0b:c0:68:da:ca:2f:4a:16:c8:55:af:b1:4a:
39:03:b1:88:6e:1d:4f:ac:fd:f3:9d:c2:51:12:45:
2b:35:65:be:c7:9d:d6:b4:64:75:42:c1:25:a3:d3:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:3D:88:36:C3:08:B3:64:79:64:43:8D:98:3A:BA:7E:5E:1B:39
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:d2:c6:28:c8:6d:c1:d9:9a:5c:52:77:6a:03:13:88:cd:
94:77:86:1b:c9:9c:15:2b:f4:15:5d:54:e8:26:27:88:d0:55:
ea:85:9b:ab:9f:55:a9:35:d3:01:fb:5a:66:4f:0a:2d:e5:8d:
bf:c8:33:1d:dd:d6:db:63:5c:9e:aa:ae:29:30:51:f1:45:36:
d2:9c:a0:83:d5:5f:a9:52:48:cc:02:1f:23:1b:64:bb:a0:35:
bb:65:c6:de:ca:c2:13:80:72:01:b8:b7:5e:5e:0a:9b:f0:f9:
ca:4d:f4:be:f8:68:3a:26:99:d1:6c:41:d0:33:61:bd:58:f2:
94:38:72:7c:ad:23:fa:9d:82:c0:38:50:62:d5:ce:22:78:1b:
3c:5d:6b:25:f3:17:8d:9a:fe:fd:96:e7:be:ba:ee:ce:40:7c:
86:a3:04:9c:64:27:ea:48:3a:9c:37:2f:b5:6e:54:40:c2:b6:
69:f8:85:7a:a5:e5:3b:dd:b1:f5:f4:bf:6c:f4:5b:81:e1:2b:
af:a4:f8:5a:82:83:a5:ec:96:fc:00:88:c7:e4:b2:12:b5:5d:
eb:76:ba:ed:a0:74:53:bb:09:11:e8:98:f9:8e:8d:f2:8f:d1:
0a:a7:1c:15:a9:27:3c:23:bb:b4:62:dc:98:51:2a:f9:d6:8a:
03:9f:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:22:58 2025 by rpki-client