Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: XEIt0NuivfLRcIl1aJZHtmCePbEEULQ4v2nwAGSSau0=
Subject key identifier: 3A:23:47:7D:49:79:74:64:98:24:48:D2:05:06:01:69:0C:3B:86:27
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 01984E8B8BD4780C285FCC886E4CB16DC0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 01:00:24 +0000
Manifest this update: Mon 28 Jul 2025 01:00:24 +0000
Manifest next update: Tue 29 Jul 2025 01:00:24 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: yr4Kiu1qiBX9gyd1yLjcZeDEQwE/z2kPHc0ij4qPPAk=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:8b:d4:78:0c:28:5f:cc:88:6e:4c:b1:6d:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Jul 28 01:00:24 2025 GMT
Not After : Jul 29 01:00:24 2025 GMT
Subject: CN=3a23477d49797464982448d2050601690c3b8627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:5e:f1:1d:e6:f6:75:34:3e:ac:40:f3:bd:
04:28:38:e7:b2:ae:98:95:5d:6c:05:f4:27:4e:09:
d2:4a:de:29:d5:d4:6f:8d:d5:4c:a4:36:8e:e1:25:
25:29:c5:69:ba:b5:b5:3f:f2:67:34:3d:ef:8d:2d:
1d:69:5c:0a:e8:62:64:a4:b7:0e:8f:ef:ca:31:f6:
7c:0f:1c:0c:1c:a9:26:03:12:b8:ef:74:87:28:cf:
2e:08:ad:63:03:5b:3c:22:fe:31:77:e4:6e:36:5e:
35:ea:85:b5:b5:67:52:b5:3c:a4:92:d2:24:b8:77:
cd:ee:e8:ab:c6:bd:57:80:80:bc:9c:d5:2b:80:11:
33:b2:f9:5c:0e:8e:41:6d:7d:19:6c:a3:0d:2d:12:
55:9b:19:22:d0:de:fd:f7:04:c0:5d:f6:9c:12:86:
b4:44:f3:15:3e:9b:26:52:f9:05:11:50:c9:04:e5:
19:bf:27:16:8e:55:68:7d:01:0a:26:b5:1d:90:a1:
82:bd:65:31:d1:34:bf:ff:3d:31:3c:16:84:11:94:
b1:a2:c6:34:90:5e:91:91:17:6e:d3:95:b3:63:8c:
86:7d:91:e7:f1:90:67:a9:74:fe:66:1d:15:0e:4b:
35:88:17:1c:d7:e6:7e:37:ce:91:69:ff:68:bd:1e:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:23:47:7D:49:79:74:64:98:24:48:D2:05:06:01:69:0C:3B:86:27
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f9:22:7f:37:fe:6b:a5:39:34:21:c3:03:f9:1b:19:c9:f5:
59:63:b0:1a:84:9f:48:5a:e8:0a:23:08:51:28:a0:9a:c7:ad:
38:d3:80:38:43:be:d6:90:d8:9b:e5:38:de:8f:8f:26:71:a3:
be:ef:11:91:98:3b:cf:75:21:b7:24:be:d2:f6:13:07:73:f1:
4a:d9:aa:e5:f6:8f:24:d2:e7:1d:cf:9e:0f:92:db:89:90:10:
b5:89:17:6f:34:f7:b3:ca:48:12:ec:d1:3b:88:06:77:66:e3:
a6:00:78:3e:93:c2:a4:68:16:29:5e:63:5e:3d:85:ee:27:02:
3c:43:64:b9:07:66:10:45:4b:50:4f:18:e2:2d:f8:cf:cc:3d:
ea:2e:5e:7c:f5:83:a3:11:7d:79:01:52:24:69:e5:78:53:2a:
8c:54:8c:f7:d8:63:9f:61:4b:49:12:79:21:da:61:78:c2:e8:
c0:03:1d:d7:f2:cc:94:4c:79:9a:84:f6:23:ab:28:fa:eb:e3:
95:5c:f2:7a:0d:73:4d:a0:e7:6e:45:2b:bc:d7:56:d4:a9:f4:
63:7d:98:77:ee:d2:64:3e:c3:8c:b9:0d:43:85:2b:33:c0:f5:
4e:5f:7a:9d:18:98:a5:19:ea:82:60:04:eb:77:b0:b9:02:85:
44:ed:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 04:27:39 2025 by rpki-client