Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: d23gjki1tOSCQnz76FU4r0yARHZpmssQV9VcnD3SG0I=
Subject key identifier: 25:FD:6C:A9:CD:A5:96:19:8E:9B:0E:2E:53:47:B3:8D:3D:A7:B9:04
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 01984AE5D5EBB61BAE5B354481AA67ACDAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0B92
Signing time: Sun 27 Jul 2025 08:00:33 +0000
Manifest this update: Sun 27 Jul 2025 08:00:33 +0000
Manifest next update: Mon 28 Jul 2025 08:00:33 +0000
Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: 7fOvwcB7rPmvBS4vxQlEuf4ytG7gM0m4T6Ic8G0j38M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d5:eb:b6:1b:ae:5b:35:44:81:aa:67:ac:da:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Jul 27 08:00:33 2025 GMT
Not After : Jul 28 08:00:33 2025 GMT
Subject: CN=25fd6ca9cda596198e9b0e2e5347b38d3da7b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:8b:d2:32:d6:e0:20:04:7b:ec:47:ec:88:
24:dc:0f:99:ff:41:72:25:e2:fd:a6:c9:04:32:a4:
32:c2:ee:28:24:5f:43:ad:58:42:5d:35:15:99:1a:
8a:68:10:25:72:35:10:57:aa:e0:c4:66:4c:68:8b:
80:09:42:e6:bf:95:fc:29:37:03:00:65:53:0b:e3:
e4:0e:91:a1:83:ab:b4:ae:27:80:5b:f1:21:38:ee:
61:8a:f2:37:03:f1:20:ea:33:ed:ce:62:f4:3d:ac:
de:41:b5:c4:dd:31:55:ed:cd:13:9f:5b:d8:0d:8e:
d7:52:16:37:31:04:a9:00:b6:08:70:9a:41:81:fd:
35:05:1f:c7:21:ff:14:75:48:f2:35:78:7e:5b:3a:
b5:1a:8f:f7:35:b0:f3:43:6f:6f:a7:24:94:f6:6b:
25:54:3b:d1:71:ae:ac:4d:b3:32:aa:a5:57:d0:72:
be:4a:46:89:f0:39:03:ec:32:51:1e:37:6f:79:ba:
4f:ee:b0:07:69:6b:69:5b:2e:58:e8:8f:aa:d1:fa:
74:25:02:04:07:63:1f:af:14:47:73:ff:e1:91:f6:
f0:1c:22:cf:9d:ba:a6:49:92:79:05:a8:95:23:cd:
d2:8a:bf:50:65:b9:43:c4:19:38:d7:5a:4c:d7:89:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:6C:A9:CD:A5:96:19:8E:9B:0E:2E:53:47:B3:8D:3D:A7:B9:04
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:84:7a:90:a7:0d:0f:8b:48:75:1b:3b:44:d5:e5:8f:65:
8c:a6:f4:b0:85:17:23:7c:ab:9d:00:b4:a4:72:03:10:f6:bb:
9c:c3:1d:d7:e8:23:f2:b4:f6:bf:72:be:d1:02:1c:ad:ba:ac:
62:ce:37:41:0a:53:01:8e:aa:fb:9c:31:98:ec:b4:59:7b:17:
84:36:7c:89:31:0c:02:7f:9d:49:e2:0d:ce:47:02:65:45:62:
ec:35:27:f8:dc:64:9d:7c:68:58:01:a0:30:e5:cd:df:79:1c:
a6:70:77:cf:2f:86:59:e6:bf:d0:41:ce:ff:97:b9:87:33:ee:
db:5a:95:2e:ed:65:c1:ee:c0:2c:c1:e6:09:47:cf:34:f2:87:
0f:fa:6b:09:58:1a:d4:72:b2:77:9b:4e:d4:5f:5e:d8:62:be:
e4:d5:d2:41:32:99:42:32:0e:e3:34:48:ed:eb:d8:6e:06:27:
8b:29:1e:65:11:36:58:4d:5b:d2:2c:7d:0b:c3:b3:68:54:0c:
a5:87:12:01:85:3d:ac:37:62:43:df:7f:f5:c0:34:dc:58:66:
f4:66:5a:2c:35:ef:c3:eb:44:5d:8f:80:1b:fa:fa:78:b4:b0:
1e:41:d1:c6:09:cb:35:a9:35:a1:4d:89:d4:b0:69:f3:f7:91:
4d:e0:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:04:31 2025 by rpki-client