Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: Ezizd29EmJAu/ZwdLdC6Gv56EFSNTNFefvi/PNAPsbM=
Subject key identifier: 84:E4:B2:A1:B8:C9:4A:A2:FB:4B:3B:BD:68:84:11:09:C5:5F:62:D9
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 019846D218C625F11DF9FB60A3F14034C37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 13:00:30 +0000
Manifest this update: Sat 26 Jul 2025 13:00:30 +0000
Manifest next update: Sun 27 Jul 2025 13:00:30 +0000
Files and hashes: 1: eHCPsFGmisg7lRclzimiGG_V3JA.roa (hash: //Um4LhSOzAoBsOI7xMkiMxwqQTwKL5Npb082+X9U6M=)
2: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: dtU0F+a4Ro9BJ5Hb9XBR2uuAsUdx99b3OAKbmhSoQnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:18:c6:25:f1:1d:f9:fb:60:a3:f1:40:34:c3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Jul 26 13:00:30 2025 GMT
Not After : Jul 27 13:00:30 2025 GMT
Subject: CN=84e4b2a1b8c94aa2fb4b3bbd68841109c55f62d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:c6:4a:86:d2:4e:79:f4:ab:9e:eb:54:9c:
da:a0:15:ce:b9:f2:26:7e:12:c4:80:a9:fa:b6:6b:
eb:88:77:51:b9:35:75:cf:6c:b5:9d:3a:76:8e:b5:
93:a1:21:47:42:b7:0f:ee:ef:f2:4a:e9:97:2f:b1:
3b:e7:6d:de:8d:46:56:f3:4d:f4:36:1e:87:4b:b7:
6f:fc:a5:62:54:1f:83:72:1c:bc:fb:fd:15:89:d7:
96:18:e1:9f:37:63:d2:5e:b0:c2:7a:d4:7a:0b:c9:
15:c6:e0:ad:90:a5:16:3b:71:8c:12:65:47:0a:d3:
0b:a0:12:62:8f:ed:2b:51:d3:93:c4:b0:a6:26:44:
63:e6:89:e2:5e:f4:ac:5a:23:ee:74:90:33:5d:82:
cb:77:e4:ab:27:3d:dc:1d:29:3a:89:e6:df:11:65:
f6:eb:61:01:6a:88:b8:3a:15:ce:d7:47:44:8a:22:
91:8b:0b:95:17:44:81:c9:2e:bf:8a:fb:26:3e:0e:
8e:96:de:9d:5b:65:12:da:2b:8b:af:32:2f:6a:95:
78:ff:21:76:19:7e:f5:f9:32:e1:32:d4:92:5f:a4:
8a:5c:de:26:43:4b:45:fe:20:c2:96:cc:cd:74:4f:
a1:6d:c9:9c:c5:52:a7:39:66:51:82:cd:d0:ab:28:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:B2:A1:B8:C9:4A:A2:FB:4B:3B:BD:68:84:11:09:C5:5F:62:D9
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d7:06:78:7f:d5:63:5e:0a:c9:a7:27:61:b9:99:8d:a4:41:
ab:a2:d2:a4:b9:40:ca:bd:ac:e4:16:ee:69:fd:cb:9f:d2:13:
27:8a:dd:ef:42:f0:e1:05:52:df:6c:bb:07:45:d7:c6:79:e6:
01:72:9e:a6:13:45:4a:cf:24:e8:42:30:6a:e5:d1:62:a8:6f:
7b:33:40:f6:2c:5b:65:9e:57:93:b2:a2:36:4c:57:dc:c8:67:
a7:00:14:9f:02:36:bb:92:25:78:50:82:da:f5:ab:36:f7:16:
b8:72:d9:8a:89:c2:9f:8f:23:04:9f:77:ad:87:e9:62:dd:fc:
5c:2f:0b:7d:24:96:2d:a3:aa:b8:42:47:65:37:69:4e:22:22:
cf:9b:eb:e5:68:dd:30:7e:fb:7d:02:48:7f:ca:93:1a:fa:b6:
d9:bf:b0:9a:7d:76:b5:a9:8b:ec:91:09:07:50:82:ec:90:a7:
3d:80:c7:79:f9:2a:f8:9e:91:0c:25:79:75:18:1c:a8:a3:3b:
95:40:1a:85:94:86:1a:4e:47:20:67:8e:3c:2b:7b:ac:be:3b:
ef:36:1e:b4:0b:e4:91:19:20:4c:dc:06:98:71:82:d0:f9:2f:
bd:b2:66:e3:69:69:62:ef:fb:ad:df:8f:8f:e8:fc:e7:47:8e:
8b:0c:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:01 2025 by rpki-client