Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: fHVesq3gRSao3W3ZZnJYxHHhTquHD4mB0mhbyEpKmgA=
Subject key identifier: D9:60:EC:8F:A5:02:83:0D:D4:29:7E:02:E0:9C:09:68:D3:34:83:DA
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 0198499BF0CFF7EA48465D2295A978BEF9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:13 +0000
Manifest this update: Sun 27 Jul 2025 02:00:13 +0000
Manifest next update: Mon 28 Jul 2025 02:00:13 +0000
Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: CtzdCPauv+DIf38Y7bQLVAy8u3Nys/hsRIfRE/2S4jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f0:cf:f7:ea:48:46:5d:22:95:a9:78:be:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Jul 27 02:00:13 2025 GMT
Not After : Jul 28 02:00:13 2025 GMT
Subject: CN=d960ec8fa502830dd4297e02e09c0968d33483da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:70:13:bd:b6:ef:d5:c3:fb:39:86:8f:77:
00:88:34:31:d9:c7:9b:63:f9:9e:14:f3:1a:77:20:
c0:b8:a8:86:44:a1:99:cf:cb:de:0c:52:ee:65:b6:
75:8b:ee:9f:52:41:24:43:4e:84:99:64:91:5b:2f:
d2:55:dd:ec:a7:8a:72:3b:ad:74:1c:e5:f8:52:73:
1a:64:55:f7:e3:00:4e:ea:91:a2:dc:40:30:93:ba:
2d:18:69:91:7f:00:c8:2c:63:3d:e7:34:cb:17:67:
1a:52:d4:e8:4a:ea:f8:28:23:0d:8f:c9:08:17:88:
03:6d:b7:da:2b:68:eb:22:b1:9f:53:be:31:95:fc:
cd:dd:dd:91:d4:13:01:10:48:17:bf:52:5f:d8:f9:
50:24:46:6d:a8:5e:7c:55:3f:60:d9:60:b2:6c:d9:
52:4e:73:73:39:b0:2e:b6:c5:1f:75:2e:8a:6f:3b:
a6:c8:fd:49:1d:57:d8:a9:78:ce:f2:d5:e3:68:78:
5a:05:37:8c:a7:38:76:55:9b:71:30:f1:89:e2:b0:
f1:42:fd:bd:4d:53:cf:7c:07:44:da:c4:1f:cf:c1:
8c:80:cb:39:0f:4c:6b:8e:1c:d6:e9:98:64:e3:b8:
67:36:c4:df:c1:40:ce:fa:5a:44:58:18:ae:87:45:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:EC:8F:A5:02:83:0D:D4:29:7E:02:E0:9C:09:68:D3:34:83:DA
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fb:ae:5f:07:61:6f:10:10:45:66:a6:a8:37:25:06:9e:b0:
f5:b5:3a:d8:5c:05:8a:c0:d9:49:ec:40:f6:6a:46:f5:ab:a4:
d4:e9:b3:36:0a:f8:b2:45:84:99:3f:16:15:da:6d:41:b1:77:
17:15:81:63:d9:10:f3:52:a4:b7:e9:33:e5:68:f0:3a:1f:ee:
19:df:5a:05:6d:63:5c:01:12:23:55:31:b5:bf:bd:60:36:ff:
ee:66:f9:06:66:96:bf:e2:da:7a:22:fa:4e:ec:68:35:56:69:
48:24:a4:07:e5:a3:85:0a:3e:fc:4e:17:11:b1:08:d7:5d:d8:
c4:fc:d0:8d:8f:e3:3e:e2:3a:c0:91:31:35:3b:8c:f8:4e:92:
60:13:d5:90:ad:43:8a:f4:fe:cf:1a:4f:d0:f6:0a:c9:d6:e2:
6b:ef:1e:13:50:16:c3:be:db:b2:45:b0:20:81:ad:1a:70:f2:
15:9c:13:b8:9e:52:dd:5b:f1:26:cb:85:00:96:89:42:e1:7c:
52:78:35:83:ef:27:22:81:3b:f0:56:91:e4:82:91:8e:c0:74:
72:c6:0e:d6:d9:50:a0:eb:fd:28:30:c8:62:4b:1f:61:41:d8:
c4:9b:a0:ba:4d:dd:cd:5e:9d:05:7f:76:06:d8:47:14:84:8f:
73:63:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:36:59 2025 by rpki-client