Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: XcYdgp7fQ3YEoV9gnmw+bCb257blBPY9z/lie9UT0zM=
Subject key identifier: 4D:A7:E1:62:28:BC:DE:82:C1:E3:00:19:C3:29:07:DE:96:C0:14:03
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01984AAEDA0001F006A58E81F30B27A94235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 01E9
Signing time: Sun 27 Jul 2025 07:00:29 +0000
Manifest this update: Sun 27 Jul 2025 07:00:29 +0000
Manifest next update: Mon 28 Jul 2025 07:00:29 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: MuQOMUpG0LS2InvCLjy65a8eqUNvybDw0MELfHfjSy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:da:00:01:f0:06:a5:8e:81:f3:0b:27:a9:42:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Jul 27 07:00:29 2025 GMT
Not After : Jul 28 07:00:29 2025 GMT
Subject: CN=4da7e16228bcde82c1e30019c32907de96c01403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:a5:30:9a:60:fa:a1:0b:c8:77:44:61:c6:
fd:e5:cb:5b:04:2a:6a:38:07:b4:78:a1:fe:72:5b:
c7:4f:01:65:68:31:6e:00:9c:d6:bf:bf:fb:05:37:
96:a2:9f:f1:08:7f:37:4b:49:de:d5:2b:85:a4:35:
51:0a:a3:46:70:cc:01:61:7b:e1:59:9b:81:6c:7a:
51:8d:72:04:92:2b:2d:1a:91:48:87:d8:a1:e5:ae:
ef:36:84:7c:83:fa:03:2f:97:bb:34:f3:86:33:45:
a1:d3:51:fe:91:2d:b1:83:70:0e:ce:aa:03:e3:49:
f2:dc:dc:81:a7:7f:d7:1a:13:22:cb:9a:4c:6c:52:
a9:59:04:e2:d3:70:90:71:ee:97:c6:f3:a8:3f:4e:
26:c1:bc:87:14:03:c5:ff:e5:2a:a6:1f:24:8e:7a:
42:69:fc:78:af:2a:16:00:15:c6:e4:3d:2b:fb:44:
2e:26:98:12:dd:84:c0:4a:f0:b9:ef:8d:ba:dc:f2:
13:27:96:e0:6b:d7:85:ce:43:a2:e0:b2:f6:6c:dd:
b4:9a:87:05:36:d3:29:e3:ae:ae:a7:4d:6f:f9:e1:
db:2a:10:6d:af:5e:e3:85:ad:11:57:33:44:ec:bd:
c8:db:0a:06:17:e3:00:77:91:af:a6:06:2a:fd:d5:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:E1:62:28:BC:DE:82:C1:E3:00:19:C3:29:07:DE:96:C0:14:03
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:7c:15:94:8f:39:44:6b:a9:55:ca:06:8f:02:d9:04:6f:
94:b3:33:5c:01:da:27:0b:b2:dc:f4:d0:de:62:e6:2b:4a:8a:
fa:78:e0:bc:ad:5e:57:2c:24:06:91:85:7f:d3:d5:2a:21:72:
53:d8:ef:6b:39:5c:aa:3e:1b:28:c8:71:dd:92:ee:a3:c7:ab:
c5:d0:99:70:8f:ec:6a:5f:1f:e0:bf:ee:2b:cc:d8:19:44:1e:
d6:25:5c:16:16:d3:0f:b5:12:5d:4a:f6:57:33:90:0b:b0:3e:
9f:af:0c:70:72:07:14:99:c4:0f:62:55:5d:84:a1:eb:78:bf:
13:7c:0f:2a:65:2d:31:79:75:cd:b9:93:dc:30:d7:91:2c:a0:
af:47:91:e3:3e:56:a5:3e:0a:26:52:c4:05:94:60:0a:9b:7e:
f9:37:9e:b3:cd:45:85:a4:d4:ba:35:8a:36:2c:b4:da:7f:3a:
c5:12:88:fe:e3:1f:70:3c:54:dd:ab:c9:46:5f:73:a1:86:6e:
c6:58:5f:e4:38:55:2c:10:75:a5:a8:93:d6:3b:a1:71:81:f7:
12:6c:81:c8:f3:1f:50:17:ae:f1:e6:59:e7:67:99:d5:15:76:
db:b3:b2:41:b1:b3:e2:2d:42:25:b9:6b:ec:1a:75:35:84:f9:
01:c0:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:49 2025 by rpki-client