Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: FqMJqdqKkJ4gu4HXph5DEPf+5nerJbdT9b+1IaZBdac=
Subject key identifier: 3B:DD:C3:15:23:FF:A5:17:20:FA:D9:1B:C1:1E:90:ED:2C:B2:6C:7D
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 01984B8AB7F7CC61BF4FE5C0A19B43B3A847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 144F
Signing time: Sun 27 Jul 2025 11:00:38 +0000
Manifest this update: Sun 27 Jul 2025 11:00:38 +0000
Manifest next update: Mon 28 Jul 2025 11:00:38 +0000
Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: W103yZgW/K/a7SpNVMdVOl+vurpIp2TRqohzzlbMRJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:b7:f7:cc:61:bf:4f:e5:c0:a1:9b:43:b3:a8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Jul 27 11:00:38 2025 GMT
Not After : Jul 28 11:00:38 2025 GMT
Subject: CN=3bddc31523ffa51720fad91bc11e90ed2cb26c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:4c:7e:01:cf:e1:73:28:32:c5:f9:be:83:
8f:1f:72:75:57:a1:e3:7d:58:86:23:57:16:1b:72:
b4:5e:dc:05:f2:80:43:36:7f:ad:31:d4:02:76:c2:
72:cd:25:65:38:bd:d6:57:27:35:9e:8b:a6:cc:c3:
08:d3:7d:52:7a:ae:f9:43:81:f2:81:63:02:ae:6c:
42:4f:73:01:f6:ba:b0:a9:65:54:f4:56:02:65:96:
09:01:af:ae:c2:bc:a6:97:ec:13:ff:19:ca:65:49:
84:45:fc:4d:3a:39:58:6e:a1:05:a6:b6:54:2b:e1:
7a:06:82:8c:bd:46:80:c7:e9:6e:bc:50:12:9b:62:
ef:eb:e5:c7:c0:0a:52:7b:1c:ee:09:0b:09:25:82:
d4:39:50:55:7b:ec:12:67:b2:f3:ff:d1:be:20:03:
14:c6:b7:9d:32:3c:95:8b:97:b5:ad:4e:4f:d1:7c:
b5:80:5a:a5:47:c9:6a:e6:5f:09:07:68:75:10:26:
67:b8:95:ac:0f:c9:de:67:ae:65:85:69:89:79:32:
36:38:e9:28:2b:27:1d:03:63:da:47:cb:f8:25:74:
b4:45:8c:5b:20:ff:54:a6:f7:d0:4d:62:56:73:48:
2a:7f:ae:e1:5e:be:d3:69:6b:1a:57:12:a1:22:a9:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:C3:15:23:FF:A5:17:20:FA:D9:1B:C1:1E:90:ED:2C:B2:6C:7D
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fb:88:3b:a9:b9:cb:49:6c:e6:b9:84:c3:c8:db:5d:f4:3e:
ea:f1:a2:bf:83:31:3e:16:12:17:35:ff:5f:45:02:b0:5c:9b:
27:fc:93:9c:e4:69:e2:ad:c8:66:34:96:ab:13:62:cf:0e:e6:
62:57:85:23:5d:eb:18:b9:97:d4:fa:10:bf:15:7f:33:6e:5f:
38:c5:b6:71:5f:f4:11:f5:c2:ed:16:74:8e:fa:22:53:07:ec:
21:29:4c:1d:94:b6:2a:2a:ad:a3:00:13:ca:43:7a:92:5e:82:
48:aa:83:11:3b:53:be:6a:87:cf:74:74:e2:f7:2a:da:31:4e:
69:52:31:0f:2d:62:c1:f3:41:b5:dd:54:89:79:38:51:c9:f9:
e4:ec:b2:20:83:18:67:42:ba:9d:d4:ff:59:96:23:3d:24:4c:
ed:ae:75:68:21:59:d5:41:d3:4b:21:db:d4:ad:af:0b:a8:99:
fa:9b:1c:c4:a7:4c:dc:59:dc:7e:93:36:50:d2:76:a1:fb:17:
66:f7:86:72:00:61:a4:90:6d:97:38:d9:23:c4:0f:70:34:75:
f8:a9:73:81:24:6e:5c:06:31:75:ff:4b:4a:df:84:9b:26:99:
45:09:70:a8:65:96:a5:47:0b:7f:9b:d5:23:a9:a7:0e:e9:6e:
63:f6:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:09 2025 by rpki-client