Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: mOwkw9vrfYbdc5wzSb6+TkckG7dNMWBMmEdczIUxvis=
Subject key identifier: 46:BF:C6:49:4A:E6:2F:C5:1D:6E:37:29:0F:69:F5:38:5C:DF:56:41
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 0198499C0C754E4667CC7BD0F1DD0BDE4611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 03B1
Signing time: Sun 27 Jul 2025 02:00:20 +0000
Manifest this update: Sun 27 Jul 2025 02:00:20 +0000
Manifest next update: Mon 28 Jul 2025 02:00:20 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: 2xMGQmTA3gBXs5sddU5Bx1ESULjgDavW+4ToWx7E2l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:0c:75:4e:46:67:cc:7b:d0:f1:dd:0b:de:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Jul 27 02:00:20 2025 GMT
Not After : Jul 28 02:00:20 2025 GMT
Subject: CN=46bfc6494ae62fc51d6e37290f69f5385cdf5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:e5:ce:05:3d:f4:92:bb:dd:78:04:49:74:
7e:fa:b9:40:a2:89:15:90:47:3b:18:eb:e6:23:b3:
00:d0:dc:61:c8:da:e0:19:5c:98:3d:7a:27:69:1b:
c1:16:e7:85:c1:8e:f6:2c:8e:ee:00:28:b5:81:40:
98:d0:39:00:63:44:b4:4c:0a:96:93:f3:48:c1:59:
96:bc:63:c6:9f:95:0d:84:c4:91:ed:d9:b4:ba:35:
98:76:0c:68:f2:40:50:61:26:39:73:4c:1f:ca:75:
fc:d6:e4:1e:7e:d2:de:7c:af:a2:14:27:8c:66:d0:
9b:b3:f7:20:f2:1f:f9:18:24:98:93:df:ea:c6:92:
09:87:f4:47:ec:dd:46:af:b3:47:91:3a:67:fd:9b:
e9:b1:3f:77:76:05:9d:52:03:62:df:48:55:de:89:
c5:08:e9:73:6c:0f:94:91:29:c7:6f:a8:65:c9:88:
84:41:cc:67:b5:b7:07:25:af:19:ad:2c:8e:db:a8:
af:44:7c:2b:29:08:9d:e4:78:b2:40:e2:eb:3c:15:
08:d3:da:ae:8d:0d:e0:dc:86:5e:35:c5:a9:7a:d6:
e1:47:cd:20:bd:bf:5c:83:31:9a:1c:a2:fa:cc:e7:
4c:b3:e2:f8:a0:7c:23:db:9c:9a:22:2d:1c:ac:73:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:C6:49:4A:E6:2F:C5:1D:6E:37:29:0F:69:F5:38:5C:DF:56:41
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:c3:60:dc:df:f0:30:f2:5a:36:d8:1f:97:09:a9:dd:85:
50:6a:9c:b7:01:c0:87:52:2b:c7:9b:9e:cc:cf:f7:68:08:d0:
2e:34:48:9d:d5:13:d3:8d:7d:28:18:c7:29:39:17:c7:a0:15:
47:e7:80:e7:1e:5d:e2:1c:f7:2e:20:d7:d2:a5:79:92:9f:78:
4a:e2:f1:72:4c:0c:58:cf:12:0c:5f:a3:ad:0a:56:b9:1f:a2:
42:b7:df:ca:1d:25:5f:b9:96:49:c8:65:e5:1c:c0:d9:18:3a:
88:25:36:b1:f2:1f:28:36:95:e4:8a:c3:7a:ed:7e:3e:9c:5d:
e6:7f:fe:5d:48:11:81:fc:ab:9c:fb:4f:b5:54:59:80:38:6a:
ab:74:99:71:34:8e:f4:d3:17:84:ae:9f:1c:45:db:ae:db:a6:
e8:22:9e:81:02:16:69:3d:cf:ed:a6:1b:a9:86:cb:7f:5b:fa:
aa:0f:5b:55:9a:d2:bd:af:6b:63:e2:ab:b5:da:e7:39:b5:b2:
3c:7e:83:12:ed:68:fa:e7:f1:09:b9:eb:9d:c5:9f:6c:3e:88:
dd:8f:a9:fa:9f:fe:8e:4e:1c:db:43:86:04:78:f3:f6:aa:11:
f3:b6:2f:f9:91:bf:27:5a:5f:7d:ea:22:33:b7:33:51:26:86:
71:3b:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:26 2025 by rpki-client