Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: z5yKlWqRIrUNGSl2/Rc+fp+ZEvvYtLTawbyWLPNEbJw=
Subject key identifier: 2C:9B:92:A1:51:FB:3C:48:70:64:F3:DB:00:6B:58:23:67:E1:4E:E8
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01984777FEF58F7197BCE8EB74AB2E566581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:43 +0000
Manifest this update: Sat 26 Jul 2025 16:01:43 +0000
Manifest next update: Sun 27 Jul 2025 16:01:43 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: 3BllYp0lI8duMjhdnJ/8c3QPpkHGMu21IYZ5miRE0tM=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:fe:f5:8f:71:97:bc:e8:eb:74:ab:2e:56:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jul 26 16:01:43 2025 GMT
Not After : Jul 27 16:01:43 2025 GMT
Subject: CN=2c9b92a151fb3c487064f3db006b582367e14ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:38:51:a0:31:15:c3:d8:83:a4:b4:54:8f:
11:f3:05:5c:f1:b2:90:df:52:02:cf:63:2b:c3:c3:
60:84:63:41:82:e4:f4:1d:2f:7c:e8:a3:fa:c1:4e:
70:e8:2a:15:58:f4:24:bc:26:08:3a:fe:31:9c:f3:
cf:52:87:13:2a:c9:0c:f7:c7:26:06:dc:f6:a1:c0:
1e:cf:57:d5:cb:30:84:29:26:8e:ce:76:b1:f4:0c:
24:13:58:ed:43:c0:b4:08:ab:df:a6:3e:b7:56:2e:
a2:a2:2a:92:ec:8e:b6:23:52:3b:b5:f7:28:de:df:
ad:42:fc:2a:2a:11:50:4d:27:c4:95:47:1d:71:90:
60:97:0f:09:ef:c1:67:ea:a9:3e:d2:3c:54:d4:06:
0a:66:9d:f1:eb:1c:10:43:18:4e:03:76:ad:9e:7a:
0d:3d:c5:3e:75:8c:e1:ef:4e:bf:c3:50:a6:65:95:
e2:80:13:8d:54:ba:29:d6:18:09:92:71:cd:fb:3d:
61:2f:37:ac:de:2c:30:cc:32:bc:d7:8d:a0:cb:b5:
9b:8b:70:28:e2:98:56:26:7f:fd:57:1d:c9:a2:a2:
38:ac:50:63:2f:29:a0:cd:a1:be:d8:db:07:37:01:
6e:2f:10:9e:d0:b5:ff:77:c5:56:2b:0b:de:32:9e:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:92:A1:51:FB:3C:48:70:64:F3:DB:00:6B:58:23:67:E1:4E:E8
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:27:70:36:1f:04:4f:1d:85:7e:2b:c7:05:0d:de:06:56:1d:
30:b3:9c:1d:e4:87:a5:51:7d:88:1b:05:56:13:96:06:d8:c2:
d0:32:e9:eb:4c:42:66:4c:cf:1d:c0:bb:3e:83:22:e1:b0:b8:
f9:24:c2:cc:e3:f0:46:b9:47:52:77:a9:89:76:39:42:94:e3:
b8:2f:16:97:bc:80:09:9f:37:a4:22:bc:a4:2f:33:dd:38:a1:
20:b1:83:bd:8c:14:13:e1:46:76:b0:c9:96:0e:05:7f:74:4c:
fe:fb:c0:97:56:5d:5b:a5:13:a2:e6:04:59:32:bf:4f:98:3e:
a2:84:64:e9:f2:89:84:78:8d:88:97:d2:67:57:d0:6e:2a:6a:
b6:bf:3b:ff:ae:b5:00:89:5b:5d:ec:8c:cb:d6:c3:f1:48:14:
4c:94:28:23:95:a4:21:b0:14:fe:d7:e4:ef:22:84:ff:29:2a:
a9:9b:15:9e:51:9d:74:bb:86:c1:d5:aa:c2:c4:1f:62:76:3a:
17:a0:73:96:fa:d8:7a:56:0b:6e:cd:97:a7:c5:51:08:84:83:
4c:e1:d7:96:6c:cb:59:c2:4b:ca:43:a0:d7:59:d7:ef:fe:58:
b5:dc:00:4e:9d:01:72:86:07:ce:df:cd:ec:c2:03:3b:af:54:
97:b1:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:58:15 2025 by rpki-client