Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: Dmd7ksdHOhfssFudsTRyZxUzXBbndWUQzqy1kv1nReQ=
Subject key identifier: A7:1A:4E:14:F9:6E:A3:E6:20:E3:67:98:AF:BE:B2:38:8D:BD:75:A6
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 019852680D53B465693EAEE6B38805209130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 19:00:07 +0000
Manifest this update: Mon 28 Jul 2025 19:00:07 +0000
Manifest next update: Tue 29 Jul 2025 19:00:07 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: mOvAXSWhlNT0fHUR8yKKQaS/LrN9gML0kM8f1reSmtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:0d:53:b4:65:69:3e:ae:e6:b3:88:05:20:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Jul 28 19:00:07 2025 GMT
Not After : Jul 29 19:00:07 2025 GMT
Subject: CN=a71a4e14f96ea3e620e36798afbeb2388dbd75a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:6d:de:d3:e6:47:8b:69:a8:8c:97:b7:7b:
d5:08:cc:fb:dc:0c:b2:bb:d5:df:51:e9:b7:71:57:
ed:38:30:46:4a:5d:2a:8f:e0:21:57:96:38:4d:84:
8a:39:c1:1c:f1:ab:3f:c3:a6:ac:86:23:eb:b8:af:
6b:35:5c:9d:56:ce:41:9f:d2:00:53:b8:bc:4c:e1:
a0:7f:8c:69:85:38:22:10:41:d0:60:ca:79:55:ad:
f5:74:b7:f6:24:fb:05:82:e6:97:ae:66:05:aa:12:
51:9a:d0:9d:53:ca:e3:47:2b:ae:04:80:9d:0c:fe:
10:60:80:2e:54:39:12:c3:76:2d:87:c5:98:a8:81:
cb:04:12:04:6e:80:df:90:8f:59:66:89:32:72:0b:
b8:2a:6d:69:46:ee:05:a0:be:0c:ee:3d:2d:aa:8b:
7b:e5:4b:d4:13:37:b0:19:7a:93:c4:0b:e2:43:88:
5f:ef:d4:ae:d4:4f:3e:60:27:10:ad:74:ae:53:7e:
cf:80:e0:17:ec:c3:dd:84:0a:60:fa:85:3d:50:7f:
11:58:d9:0f:d6:7f:4e:55:d5:95:91:da:c5:58:d5:
83:6d:48:41:61:28:24:5f:12:d4:29:15:fd:f3:28:
60:fa:68:9c:23:2d:d0:d8:f8:15:f4:dd:b7:c8:1f:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:4E:14:F9:6E:A3:E6:20:E3:67:98:AF:BE:B2:38:8D:BD:75:A6
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:65:14:34:d5:61:da:65:9b:9c:8a:ed:4e:3a:31:d7:4c:
d4:13:81:fa:91:de:4c:e4:4f:df:86:64:b5:98:3c:d8:6f:a3:
bf:53:cc:2c:a5:2a:35:7a:9d:d7:d6:90:86:d6:33:1c:0b:cc:
18:d8:26:cd:6e:11:5f:7d:df:5d:b1:39:6b:46:a9:dc:86:9a:
bc:6a:c0:70:c4:11:a4:3a:f6:87:c3:86:51:30:69:7a:3a:54:
48:20:35:c8:1c:e5:1d:69:c2:d7:41:6e:21:17:68:0b:1c:fc:
01:ab:8c:f5:5b:66:e9:91:cf:52:54:86:76:de:3e:31:fb:4e:
08:61:b4:92:05:c3:47:e4:eb:a8:0d:8f:12:5e:b1:3a:db:31:
9a:a7:73:3a:99:d9:53:ee:d4:2e:93:8c:a3:74:7a:ba:67:a0:
64:c7:27:71:83:8e:99:d8:8e:2f:5b:93:2f:16:1b:d6:6f:da:
1f:e8:02:0b:a8:7d:2d:95:cd:90:b2:a9:e6:a6:12:b2:ef:76:
78:e0:e6:80:b4:51:56:cc:1d:d0:3c:c4:29:3d:fd:7a:15:4b:
71:de:25:44:82:7f:b2:df:b9:09:bd:5d:1f:54:44:34:0b:8a:
16:ac:f5:44:7b:e3:72:8f:3f:f1:9a:73:da:ba:bb:a2:66:0c:
31:d0:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:45 2025 by rpki-client