Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: +eg7cZXANkeo3lB/7G5ZlNcKnR0KWPBYy/I8hAURrlI=
Subject key identifier: 59:05:27:AB:B1:C0:1A:9C:93:35:43:FF:8D:A8:51:AB:E5:96:BE:29
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 019855A0DDF3EA9372602C14AC2BB34F5E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 027D
Signing time: Tue 29 Jul 2025 10:01:02 +0000
Manifest this update: Tue 29 Jul 2025 10:01:02 +0000
Manifest next update: Wed 30 Jul 2025 10:01:02 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: Lpial0WjW9sQRM5GdXmWdo/bE4SHargGA6MMN8JUSaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:dd:f3:ea:93:72:60:2c:14:ac:2b:b3:4f:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jul 29 10:01:02 2025 GMT
Not After : Jul 30 10:01:02 2025 GMT
Subject: CN=590527abb1c01a9c933543ff8da851abe596be29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:90:fb:3c:bf:76:23:67:a3:58:1f:df:fb:
0a:de:3b:ba:66:7b:49:39:ae:4d:c4:74:f1:5e:1c:
33:c8:ca:46:91:8c:47:eb:5d:b5:d0:45:ea:8e:f7:
2d:71:c3:6e:8a:4b:a9:2b:87:70:e2:1b:c3:0f:5d:
aa:62:6a:bd:2c:e9:41:78:99:bd:7c:bd:b3:d9:fe:
2e:6b:10:3e:3b:7c:04:7e:06:24:9b:9f:b5:6c:44:
e2:3b:d9:6c:5c:25:e7:11:56:7e:b9:29:a6:70:f6:
2d:c7:34:53:5f:b6:ca:41:0a:b2:9b:ff:ac:26:8a:
51:0a:6b:60:27:7e:9e:58:c0:3a:57:5d:d8:d6:51:
34:ce:00:22:03:1e:b6:97:dc:c3:3a:70:86:f0:b1:
31:c7:90:99:f4:d4:dc:03:c0:ab:18:83:f7:a1:bc:
0d:af:33:10:1c:2a:20:2c:fd:a3:62:36:bb:f5:5d:
58:f4:16:59:38:2b:d0:f5:92:03:5c:db:66:f1:93:
11:8e:3d:98:92:41:6e:4d:8c:c6:5f:84:77:48:18:
81:a1:1c:6d:e6:fc:5b:a1:82:26:a3:10:49:4a:1d:
f1:b6:3e:70:f9:d1:9f:b4:50:f7:83:39:f2:d0:dd:
1e:06:0f:a5:ed:d1:23:74:e4:47:cb:d1:dd:a5:23:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:05:27:AB:B1:C0:1A:9C:93:35:43:FF:8D:A8:51:AB:E5:96:BE:29
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fa:67:ab:05:c6:74:30:15:c3:69:dc:68:1d:b8:f1:64:a4:
a9:e8:01:69:d1:58:55:5a:bb:2a:c8:96:bb:01:40:bd:51:31:
ce:eb:be:7f:2b:50:57:c0:c0:b1:61:9e:cd:a5:ca:a8:c7:aa:
33:6b:f1:e6:18:76:87:fb:08:06:cf:19:fe:c0:3c:19:c6:25:
ed:8c:f9:92:c7:b9:2f:8b:17:e1:bd:fd:c9:6c:0e:78:52:81:
1c:58:c5:5c:5d:4e:40:c5:ef:25:3a:e2:7e:26:b3:03:b4:10:
28:e1:4f:1e:0c:ed:26:14:51:ac:01:cf:f5:d2:5d:cf:3c:ce:
90:7b:47:9b:c3:8b:bd:23:76:c5:9c:fd:c8:f3:dc:87:26:b3:
13:c2:80:bb:04:06:36:e5:e8:9a:c4:6e:3c:ea:77:b1:3a:b0:
6d:85:42:27:95:cc:c4:66:83:bf:05:6e:b8:1d:a0:a0:96:ac:
ea:8c:c1:e2:61:ac:9d:21:1c:86:b8:c8:ea:e4:0e:71:45:cf:
86:f1:62:22:4d:80:b9:cb:09:a9:a8:c6:d0:3b:b7:91:16:04:
72:79:b7:62:45:cf:64:16:96:22:92:e6:ca:6c:48:3e:14:85:
26:14:f3:81:a2:57:f3:16:63:56:1c:dd:f6:9a:ec:4f:cf:83:
9a:46:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:36:19 2025 by rpki-client