Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: EUP3PJcmSKKfralBqwLXS8Yevxhx9rSu3MVM98zTG0U=
Subject key identifier: 40:16:C5:E7:8F:64:2F:E0:91:5A:12:9E:26:DA:5E:D8:B8:A9:F6:DF
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019848C0D1C7E940C7C04D4A6A11F7EFEED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 1377
Signing time: Sat 26 Jul 2025 22:00:52 +0000
Manifest this update: Sat 26 Jul 2025 22:00:52 +0000
Manifest next update: Sun 27 Jul 2025 22:00:52 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: kcTQD3YxDvPcLRSfzCSPQGDK2bFpyS92GPEbig21ZB0=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:d1:c7:e9:40:c7:c0:4d:4a:6a:11:f7:ef:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jul 26 22:00:52 2025 GMT
Not After : Jul 27 22:00:52 2025 GMT
Subject: CN=4016c5e78f642fe0915a129e26da5ed8b8a9f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:6f:69:05:74:94:a7:88:08:4a:71:4b:9f:
d4:50:40:4f:61:ba:e9:1d:c3:fc:7e:db:d6:f7:31:
fc:e7:43:df:91:ec:37:8a:0b:11:f6:b6:1f:a9:73:
90:5f:94:69:c9:59:83:50:73:7a:42:cd:3c:7e:e8:
d4:d4:21:02:c8:1d:59:b1:a4:25:8a:9b:62:28:b5:
6e:fb:db:4d:34:89:db:ad:9b:09:ba:ff:8c:8d:22:
90:54:e3:89:cb:03:38:41:2a:db:c2:2a:4a:a3:a9:
ea:68:d5:a3:3d:ef:e2:4a:03:04:fc:89:a7:4c:0a:
af:d1:08:74:fe:9f:4c:e2:80:2e:32:8d:17:a8:6e:
13:ee:ba:ec:0d:88:78:9a:2a:1b:3b:0e:0c:b2:29:
db:b1:5d:7c:d1:58:c8:76:43:dd:a2:51:1f:0f:a6:
2d:8f:d0:b2:8b:15:7b:ef:4c:84:11:87:2f:eb:40:
56:0a:b4:fe:82:5c:2b:00:2d:b4:2f:01:03:ae:36:
5e:5f:cf:be:00:56:35:9c:e9:26:f8:fb:e8:c5:fa:
64:e1:7f:46:16:6d:e3:38:45:82:c2:7c:54:55:70:
7e:ff:05:e6:4c:08:8e:64:1a:ad:0c:8d:9c:17:9a:
46:64:34:e2:25:16:d8:be:a3:07:66:de:c2:c6:21:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:C5:E7:8F:64:2F:E0:91:5A:12:9E:26:DA:5E:D8:B8:A9:F6:DF
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:b0:3e:64:32:3e:a8:29:12:dd:f1:eb:a2:20:d0:a9:d9:
56:77:6a:f0:9e:07:66:c4:7b:85:23:2e:4c:c9:46:65:f7:fd:
b9:f2:c1:d8:ca:83:86:ba:2f:14:7c:34:59:3b:65:b6:c4:b7:
4b:09:d5:07:25:09:90:19:62:68:f2:11:d9:b7:ae:ab:1d:21:
21:55:95:70:bd:a7:e5:be:b0:68:79:95:17:f5:82:4a:7c:42:
e6:d4:fa:35:f3:77:13:38:97:45:99:e0:10:8c:51:1c:91:70:
be:1f:1a:a2:96:06:a3:e1:8a:c9:73:ac:3e:39:4b:5a:18:51:
18:58:f8:c1:f5:2e:4c:77:93:ec:11:fd:a0:22:59:92:bb:c5:
a6:8c:41:03:11:09:3a:58:0a:49:92:9c:d1:a0:5d:8e:1b:ba:
7f:e1:42:54:87:e8:90:3c:50:51:d7:ed:8a:f5:94:b5:22:bf:
e7:58:87:08:fc:a7:a1:63:97:43:e7:5f:52:8c:0a:c8:92:ed:
ec:0f:8a:1d:46:05:e6:04:27:d0:f7:65:33:ed:da:c6:bf:33:
87:dd:e6:b2:36:13:d9:4a:49:c4:e9:5e:d5:03:ca:03:89:f6:
09:d5:ff:f7:33:69:80:b0:16:f9:1b:7e:1c:58:0b:11:a6:97:
b1:5c:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:08 2025 by rpki-client