Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: LFpTwIkRBfgJuy62WtcHvWXNBYucaoFcQ30CQDtPSwg=
Subject key identifier: 72:9E:8D:BF:55:3C:78:7F:C8:B6:66:DD:29:67:B3:B3:5E:E7:FB:D7
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 01985532B54745513BFFE1CBB466946D055B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 08:00:43 +0000
Manifest this update: Tue 29 Jul 2025 08:00:43 +0000
Manifest next update: Wed 30 Jul 2025 08:00:43 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: HLdi9gzJIENuYVQkEU77v9QVCmAmzlb5yfMifpNn1PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:b5:47:45:51:3b:ff:e1:cb:b4:66:94:6d:05:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jul 29 08:00:43 2025 GMT
Not After : Jul 30 08:00:43 2025 GMT
Subject: CN=729e8dbf553c787fc8b666dd2967b3b35ee7fbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:ad:7a:2c:59:36:83:e3:0a:2b:c3:4e:f5:
44:fb:be:7e:9f:67:be:60:86:dd:47:76:42:bf:38:
8c:01:cc:f5:fc:ac:96:ca:15:c0:9d:52:6e:8f:a4:
3e:38:24:77:b4:b7:eb:e7:1c:51:7c:2f:c7:fa:f7:
cd:29:c9:6f:79:04:4a:d5:0e:b1:b9:16:bb:54:fd:
8c:5a:1b:6d:01:ba:4f:ef:70:45:5a:dd:da:d1:0f:
d7:c6:32:c9:bc:82:04:5c:e8:6c:72:a3:f7:ee:6d:
33:1a:a0:b7:b7:e6:0f:ef:34:5e:a6:18:0d:42:43:
d0:9f:a0:d5:77:85:9c:6b:14:6c:46:78:55:3c:60:
2c:49:6c:68:bf:ea:87:e9:e6:a3:6f:ea:70:6a:d6:
3b:a0:6c:c2:5b:c0:95:06:02:e2:d4:dc:5a:a7:05:
11:54:84:6a:6d:f7:d9:6f:28:d0:9d:d4:c1:e9:7b:
81:04:6b:cd:79:9e:f3:bb:e2:2b:11:a7:72:51:0e:
96:ed:0b:a0:e4:4b:e4:de:c4:19:15:b7:92:b5:30:
65:bd:be:70:8e:5c:11:13:04:e9:5d:3d:67:68:b9:
df:2e:cc:f2:03:f4:d5:36:8e:97:08:2f:5c:99:13:
f8:4b:bc:ad:a7:8d:e9:62:02:e9:a8:1d:ba:23:75:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:8D:BF:55:3C:78:7F:C8:B6:66:DD:29:67:B3:B3:5E:E7:FB:D7
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ab:f9:a5:1d:1a:17:e4:4a:4f:cf:5e:f5:95:dd:e5:c9:74:
bb:33:2d:d7:3a:a0:a2:74:c4:7f:1c:8c:9f:72:22:6f:9e:13:
eb:1b:1f:9f:51:fe:8b:d9:16:06:f8:ab:2f:fa:11:7e:e0:a3:
0d:ae:38:b3:91:b7:00:c4:00:de:41:56:06:ee:03:d4:4b:6f:
82:25:7b:b2:1d:34:02:24:fe:cb:a0:b4:1b:2e:a3:d1:af:a1:
be:53:b9:18:61:65:94:90:81:2d:e9:dc:7a:39:87:7a:59:51:
97:08:c6:18:58:ba:f6:e9:eb:60:13:01:9b:41:b4:a0:37:f8:
89:cf:9f:a4:cc:6a:d2:dd:dc:ac:25:63:38:e6:5c:d5:3d:c9:
01:7f:58:6e:d2:bd:ef:84:60:92:a7:55:11:4a:71:69:8f:77:
4b:83:a3:4a:2d:d5:99:42:73:37:3b:b0:2a:1f:67:d7:87:54:
e2:ef:89:39:c1:ff:1b:a2:8b:88:94:00:4b:ba:ca:49:1f:aa:
8b:27:57:2e:dd:8f:46:73:46:be:ce:bc:74:c6:69:2f:08:6f:
80:77:a2:09:f6:2e:0b:a3:45:a7:d4:55:e4:c8:36:f9:e3:69:
23:ca:11:06:1b:76:b3:f4:93:8b:9e:01:71:65:70:d7:5e:3a:
67:ad:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:24:13 2025 by rpki-client