Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: YRtjgDCwuyVK2pAMzm/WjNaWSbHqBPojxf91TWKWpM4=
Subject key identifier: 36:FA:31:01:47:47:27:C8:B2:95:57:8A:1E:35:EC:41:7C:37:68:3E
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 01984B5495C1220CD515914EE7E9260097F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:01:31 +0000
Manifest this update: Sun 27 Jul 2025 10:01:31 +0000
Manifest next update: Mon 28 Jul 2025 10:01:31 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: ZUUmQ7ueheFlCZRMwm6f1HwHy3dRKneZ17iHA0Mi128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:95:c1:22:0c:d5:15:91:4e:e7:e9:26:00:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jul 27 10:01:31 2025 GMT
Not After : Jul 28 10:01:31 2025 GMT
Subject: CN=36fa3101474727c8b295578a1e35ec417c37683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:9c:73:c1:3e:23:8f:88:38:cf:a3:1d:0f:
a7:76:80:34:73:7c:09:c0:4e:56:50:e4:8a:25:08:
87:24:91:53:f1:a8:3f:51:18:84:3c:87:f3:33:b4:
75:75:40:5f:d9:a6:c5:6f:45:7e:16:a2:ee:51:c0:
e3:08:ce:b8:d2:92:31:0f:f1:d0:e9:43:ea:1a:32:
20:49:34:44:39:14:51:b0:f9:ce:4e:ba:64:37:03:
b8:45:a2:97:f6:fe:c8:7e:6c:8f:f5:8b:62:65:b3:
85:dd:cc:71:34:da:ff:2d:33:f0:67:8a:8f:ea:10:
0c:dc:e8:7f:7a:fe:c5:de:87:3c:6d:35:39:60:9f:
2c:b6:3e:90:67:0e:37:17:12:24:b2:95:ee:96:f5:
10:79:e6:b9:24:fc:5f:28:75:33:32:0a:1c:a1:db:
a1:e5:58:ff:fb:d2:35:94:e1:33:9a:54:a0:57:60:
13:41:02:94:7e:6d:6f:03:90:52:43:31:a4:63:3c:
92:45:ae:e3:94:bf:4a:0d:5e:5f:7d:ed:0f:04:73:
40:83:c6:03:61:02:79:8c:b6:d0:2c:f4:be:44:71:
bd:a1:20:80:b8:7e:b5:23:f3:3a:cb:a8:5a:64:91:
94:d0:61:52:03:29:95:93:cb:fb:6b:7a:96:39:e7:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:31:01:47:47:27:C8:B2:95:57:8A:1E:35:EC:41:7C:37:68:3E
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bb:ed:0c:b2:7c:a9:b1:98:d4:5c:cb:48:0a:fd:d4:28:e0:
06:bc:bc:26:37:06:2e:dc:45:e3:fb:69:d6:67:f8:5e:dc:17:
53:9c:a9:df:4b:f4:44:02:19:49:38:0b:3d:86:be:e0:41:8d:
52:fa:40:18:30:d2:61:e2:a9:cf:e3:f3:fe:c3:b9:65:f7:e6:
db:0e:96:6f:a0:54:da:81:37:25:98:bd:0c:76:88:4d:47:3a:
99:48:6c:93:c7:0e:7d:db:51:0b:ed:ef:22:a3:fa:0f:de:d4:
f6:52:6d:8a:b1:46:b6:02:2a:f0:78:15:c9:74:43:5b:77:af:
4c:42:5e:e2:31:13:ee:17:ea:9d:31:e8:7e:4f:17:15:7f:91:
44:3d:f8:43:5d:ac:dd:0a:bb:bd:ed:44:89:ba:2d:49:ca:38:
1b:67:17:3d:38:cd:a9:46:0d:52:43:58:19:fd:0c:de:d5:a2:
6c:66:6c:23:98:1f:51:5a:7b:d5:2b:93:7a:fa:44:4f:e3:d5:
88:47:d8:26:86:22:af:bd:80:64:99:77:15:2a:e2:9a:b4:42:
f1:bb:0c:04:85:6a:cd:38:0d:2b:33:95:d8:34:36:3a:51:d4:
cb:0a:67:81:fe:12:8c:d7:5e:51:0f:24:e8:28:d9:28:fb:cf:
d3:43:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:19 2025 by rpki-client