Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: l01DXnV1VSZpjTXxO2F7Ovxj70AY/aEVvghXVinjVew=
Subject key identifier: 76:1C:39:BA:C7:E7:05:C4:13:67:60:A4:BC:7A:CC:E5:7A:2D:DC:94
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 01984966D072EC22E6E151B93B8A063FC552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 01:02:11 +0000
Manifest this update: Sun 27 Jul 2025 01:02:11 +0000
Manifest next update: Mon 28 Jul 2025 01:02:11 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: A4SNdf5hTIIgbMLkQ7SxCOzM8QwSzRCecg5uYCPXZkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:d0:72:ec:22:e6:e1:51:b9:3b:8a:06:3f:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Jul 27 01:02:11 2025 GMT
Not After : Jul 28 01:02:11 2025 GMT
Subject: CN=761c39bac7e705c4136760a4bc7acce57a2ddc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:23:80:bc:41:0f:77:97:d4:51:fc:21:54:
69:f4:2f:c4:ee:bc:f9:42:41:e5:0d:eb:df:a0:e7:
63:3f:b5:e1:39:9f:35:50:05:c8:3e:b9:65:ff:42:
29:1d:52:22:26:e8:eb:f3:e0:b0:78:f7:ef:2a:81:
dd:07:4b:83:9f:cc:0b:20:7d:9f:88:73:93:dd:71:
38:f0:db:9f:b7:23:68:91:af:37:59:0c:84:10:7c:
0c:fa:f5:e0:53:06:c8:78:a4:20:cf:37:5f:e2:a7:
af:f7:35:37:18:52:5f:f8:af:20:8e:df:9e:8b:d9:
ea:45:98:23:a9:4c:23:1f:61:0f:89:58:59:ed:0c:
e0:02:cf:83:7b:aa:ce:4d:7e:4d:62:a0:ac:41:87:
0b:f2:d6:69:8b:0a:60:54:0e:8c:82:4a:1d:3f:13:
9e:27:a2:3d:92:d2:8d:65:3b:c4:b5:2c:00:f8:59:
25:26:b6:e0:63:69:fc:55:c3:27:62:4b:0e:7e:31:
ef:2f:7f:49:8a:65:6a:20:b8:82:ce:58:06:2f:f6:
8e:68:32:b7:3a:87:32:84:06:c2:ae:10:36:0c:08:
61:27:f7:75:10:89:60:2e:df:8f:c4:9c:04:24:71:
e5:1e:d6:e8:f9:31:66:a2:d1:8c:0c:8c:f5:ab:d4:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:39:BA:C7:E7:05:C4:13:67:60:A4:BC:7A:CC:E5:7A:2D:DC:94
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:c8:f9:b1:07:2f:84:7e:20:7c:de:50:0c:19:e6:1d:13:
aa:2b:09:ae:1d:51:77:6c:34:59:f5:cb:63:30:48:23:16:81:
c9:e5:a5:c7:11:75:56:64:09:0d:7e:ec:8f:2f:5c:c3:b7:1f:
9d:6b:72:f4:bb:7c:76:a1:1a:65:d7:26:40:b3:36:d9:c2:a7:
69:02:90:0a:d8:89:df:c6:dd:3c:6b:ac:15:02:b4:9b:e3:28:
19:74:b4:c3:f2:59:bb:1e:35:32:50:e5:c3:23:d9:ba:b2:02:
80:4c:bd:f0:8e:c0:d1:98:0d:a0:be:54:9e:46:7c:da:5d:a5:
5b:d9:8d:40:3e:5c:f1:70:9c:c9:c2:43:02:5d:45:64:fc:8b:
cd:f8:b0:2b:36:bb:1d:19:b5:2c:69:91:2c:e2:32:05:5b:59:
d9:c4:ed:3d:b3:88:c2:f8:34:45:42:4b:94:64:f1:89:d5:ed:
39:90:e2:88:80:8b:b5:c3:d1:fc:9b:18:f9:de:db:91:0e:4d:
7d:0a:16:69:8e:17:17:7d:ec:2d:91:2b:bf:29:24:43:c1:88:
79:c3:f6:02:aa:07:b6:5d:bb:35:a8:4a:e6:48:8e:41:a7:f6:
48:2b:45:ec:5c:b8:ea:c3:36:6a:d9:e1:dd:21:b8:e6:0c:32:
2a:d9:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:37 2025 by rpki-client