Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: EWnMS0R/GFeYZznFWBntkktsunJFbXqeCe8KZ+fM8NU=
Subject key identifier: 66:68:27:F9:F0:E0:D1:B4:9F:5E:5A:1E:5D:B8:1E:EF:28:46:B4:A4
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 01985833E912A3E26CD7E0DC885E5DEB95B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 078A
Signing time: Tue 29 Jul 2025 22:00:53 +0000
Manifest this update: Tue 29 Jul 2025 22:00:53 +0000
Manifest next update: Wed 30 Jul 2025 22:00:53 +0000
Files and hashes: 1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: yUrnHy3uzzyt0v77mRZLaU8x+y4zGMg/9PsdgUtulog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:33:e9:12:a3:e2:6c:d7:e0:dc:88:5e:5d:eb:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Jul 29 22:00:53 2025 GMT
Not After : Jul 30 22:00:53 2025 GMT
Subject: CN=666827f9f0e0d1b49f5e5a1e5db81eef2846b4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:96:73:27:9b:ea:4d:a9:36:90:33:c3:a3:
7f:6f:29:1a:c5:fe:a4:8b:67:88:1a:d1:6b:de:83:
6f:1e:fc:a1:26:fb:5b:ac:47:74:71:ab:9e:b2:31:
f6:24:65:e5:6c:0a:71:cc:e9:eb:97:1f:3a:5a:8a:
c5:84:88:fe:a8:b4:3b:77:8b:b2:5a:b4:e2:bd:31:
12:e8:a2:3f:2a:74:b8:e0:90:6f:57:3e:15:92:e3:
55:94:b1:c1:05:61:d7:7b:45:2b:b6:ae:2f:fe:75:
8f:ab:db:0b:1a:c7:bc:82:57:dd:49:b8:b0:be:db:
3d:97:17:30:7f:06:c7:23:23:4d:65:6f:33:7b:d5:
e5:13:89:73:d3:d4:03:bb:f7:67:47:f4:c5:44:b4:
a1:55:66:71:a7:45:40:55:44:1e:31:fb:97:02:07:
5c:75:24:20:3d:18:b9:d4:a8:b5:eb:9c:76:08:96:
94:dd:84:e0:15:4d:59:19:c2:04:73:96:ba:3d:64:
54:d6:1a:55:00:b4:10:72:54:04:27:1c:00:0a:bb:
84:79:91:c0:3d:72:cd:4b:64:cc:47:2f:c1:8d:9e:
09:1d:33:d7:27:35:b2:55:fc:6d:f1:47:e0:31:c2:
ed:7a:24:10:41:b7:3f:d2:ab:5b:fc:a9:bb:67:75:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:27:F9:F0:E0:D1:B4:9F:5E:5A:1E:5D:B8:1E:EF:28:46:B4:A4
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:57:c4:6c:f3:ed:55:b6:8b:52:64:bb:4f:0e:87:b5:ce:a7:
31:e6:a4:d8:37:48:28:89:27:dd:22:4e:bd:80:60:de:c1:93:
0a:1b:67:52:4e:2a:ed:a8:eb:c3:55:0a:52:ca:d9:75:fe:74:
98:40:dd:b3:cd:3e:c5:fc:a6:4c:a2:e7:0a:d9:f2:2a:f7:0e:
9f:d7:5d:d7:61:7e:c5:7f:c8:a6:47:89:45:5d:1a:7b:a0:64:
ac:20:93:57:bb:d7:22:bf:ca:cf:15:52:92:d5:a9:80:de:a2:
b3:e6:3f:05:5b:0e:eb:a3:14:fb:7b:3f:3a:7e:fe:44:97:26:
9b:59:ef:80:b2:a7:58:c1:d4:b6:59:f6:c4:5d:7f:fb:3c:93:
9b:71:73:b6:b7:59:44:bc:8c:48:ac:61:a0:96:5d:c4:c3:57:
2b:55:dc:79:cf:a2:4d:1f:54:c7:f0:b7:4e:6c:ee:44:54:70:
22:6a:9b:59:40:ab:37:81:f2:b6:9a:27:96:cd:c5:0f:af:80:
06:9f:0f:c3:57:aa:52:a1:41:58:07:5d:a1:1c:f2:a4:39:58:
1b:f8:97:6b:85:00:bd:c3:25:e9:12:31:0c:88:14:86:45:af:
ea:da:eb:7a:c3:22:0c:37:d3:73:9c:0f:b7:23:b0:37:92:11:
2c:21:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:17:27 2025 by rpki-client