Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier: RC+efBBM2aBeuNvSUd2ONd7patEwljus/azCqrDxQj0=
Subject key identifier: BF:A8:2A:6C:35:13:FB:31:84:EF:68:23:B7:8A:42:EB:EA:B3:41:22
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 01984AAE83E77619B4B70D6E3AD9E4D2A3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number: 0933
Signing time: Sun 27 Jul 2025 07:00:07 +0000
Manifest this update: Sun 27 Jul 2025 07:00:07 +0000
Manifest next update: Mon 28 Jul 2025 07:00:07 +0000
Files and hashes: 1: 03YOknvLzuLtecipQHEM9oUgfnY.roa (hash: Y9pc0KjN0jtXN7PMd6pV/+HMwsV4kn+UyMORZ9TrI7A=)
2: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: jZCnMsZacfOvjDed12en2F0A1H40IcyMiE1TlB2XZCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:83:e7:76:19:b4:b7:0d:6e:3a:d9:e4:d2:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Jul 27 07:00:07 2025 GMT
Not After : Jul 28 07:00:07 2025 GMT
Subject: CN=bfa82a6c3513fb3184ef6823b78a42ebeab34122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:68:37:86:97:39:27:b2:19:f9:db:ac:7c:
2a:42:ee:0e:0a:24:37:5b:f0:5f:85:03:f9:04:23:
c5:2d:69:95:1d:ba:70:fe:b3:80:a6:1d:93:b5:ca:
fc:f6:ad:63:34:00:bb:11:b2:56:36:73:76:0f:22:
0e:9a:1a:e7:eb:49:23:4a:9e:eb:2e:51:d1:e8:55:
da:0d:a1:a9:e5:52:9d:41:49:d2:b0:60:75:b5:38:
b1:1c:e9:4b:a8:0e:2f:d1:71:a5:50:fe:33:b6:fd:
2a:1e:59:9b:e2:47:6e:0f:eb:18:56:4e:39:31:52:
5a:a7:62:3f:10:1d:22:1f:0a:92:96:22:ab:49:a6:
e0:13:c6:92:c2:1b:17:31:51:f9:05:10:a5:97:0a:
c6:56:02:e4:b7:4d:17:57:29:7f:5e:cc:06:25:bb:
66:4a:c9:57:4f:b1:d0:a9:07:cb:52:ea:ca:a0:3e:
f3:f6:f6:da:70:85:5f:21:f3:88:75:73:34:80:f6:
af:e7:fc:e6:18:47:25:a7:bb:86:79:86:26:13:16:
ab:35:b5:6a:e5:bf:37:15:ca:55:94:54:45:3c:aa:
61:fc:38:e9:f4:56:88:d7:c0:31:ff:28:4f:8d:09:
89:11:62:b1:cd:0d:2f:b0:0b:de:79:25:d4:5b:22:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:2A:6C:35:13:FB:31:84:EF:68:23:B7:8A:42:EB:EA:B3:41:22
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:da:6a:5a:2c:5f:df:5c:7b:04:9b:67:6e:30:32:ae:52:9a:
a7:84:5b:10:c0:eb:a9:91:ab:70:77:a2:50:33:83:a8:a2:09:
74:ec:07:f6:44:b4:37:02:d5:dd:85:03:13:7e:66:a6:f4:4a:
e8:1b:1a:89:29:44:83:47:b1:54:69:71:f1:33:ef:63:e7:7b:
02:e9:29:8a:29:a3:6b:67:36:e8:37:87:72:42:d5:6d:73:c5:
23:7f:b2:a2:e8:98:8c:b3:8f:16:f5:2b:8d:4d:f8:6d:b7:bf:
17:00:12:e7:6d:00:78:0a:65:53:79:25:d3:5b:d4:04:0e:a6:
46:e1:69:0e:23:bf:5a:9f:71:9c:70:8a:3a:78:41:ac:f5:85:
20:ad:89:78:72:82:90:ac:55:fe:44:7d:a5:0d:c1:25:aa:da:
15:45:33:1b:f3:e2:7d:79:0b:c3:cb:95:f3:fb:c6:0c:52:6a:
f7:dc:e4:78:4d:a7:02:c8:f0:c3:f0:97:3e:17:cb:5f:f8:e1:
c6:ab:7a:de:d6:a9:b4:fc:87:ea:ad:84:e2:83:af:c1:b7:85:
5f:77:17:fa:2a:07:44:29:6f:a8:3e:1d:c6:77:dd:d8:8b:6e:
7f:c0:4f:68:95:80:71:2a:27:2d:a1:7c:f9:f9:7b:27:97:45:
29:fe:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:12:40 2025 by rpki-client