Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: nDNQNQkLM2+bgB1HOP3GuirQ5mlBnH6FU5FEe4jnhvk=
Subject key identifier: BC:D3:11:5F:28:BF:C7:68:D7:34:89:45:17:FE:CC:8C:97:04:D0:19
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 01984B8A8FA8590AA1373517494D9A91A723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 1615
Signing time: Sun 27 Jul 2025 11:00:28 +0000
Manifest this update: Sun 27 Jul 2025 11:00:28 +0000
Manifest next update: Mon 28 Jul 2025 11:00:28 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: 01aaZWulS6b/hAbLzTBvRfA9iOtdEl7aCRE6G+u2oho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:8f:a8:59:0a:a1:37:35:17:49:4d:9a:91:a7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jul 27 11:00:28 2025 GMT
Not After : Jul 28 11:00:28 2025 GMT
Subject: CN=bcd3115f28bfc768d734894517fecc8c9704d019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:40:79:db:4b:e7:19:9c:ed:1b:e4:c9:5b:
81:0b:8a:51:2f:f8:86:13:8f:67:fa:8c:11:ff:0d:
8d:91:f7:f7:92:cf:0b:8d:a4:38:3f:ce:4f:96:7c:
b7:d2:78:ca:8b:80:8a:ae:63:97:8a:48:12:b3:12:
ea:16:ce:c5:cc:dc:72:5e:54:f5:5c:d3:d2:59:aa:
b5:9c:e1:49:42:62:bf:ae:5b:e0:e3:55:1f:0b:92:
96:28:c7:de:7d:9f:06:c1:3c:c5:6e:69:39:22:ca:
37:5b:65:c6:98:7b:07:30:85:40:1a:b2:8c:97:71:
29:88:18:b3:61:1a:6a:4e:8e:64:64:90:0e:a2:a7:
79:60:dd:86:8d:62:f7:92:4b:5f:3f:f4:1a:b8:86:
a0:f0:0f:5b:f3:b6:3f:a6:e3:ca:e0:00:95:88:bc:
bb:bf:b0:56:06:b1:c8:f2:d4:ac:5a:4a:db:47:a4:
70:47:14:8c:7a:3e:91:0c:64:ad:ac:30:a3:9d:bd:
f6:e5:42:ec:37:d9:20:13:2d:99:4c:ce:5f:1d:4f:
86:e9:f2:52:81:ab:c5:96:9e:b2:c7:84:b6:81:45:
e7:d1:5c:49:c5:18:19:c4:0a:1f:1d:06:a6:b4:85:
4b:4f:d5:ba:18:36:3a:8c:d2:fc:50:77:f1:dc:59:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:11:5F:28:BF:C7:68:D7:34:89:45:17:FE:CC:8C:97:04:D0:19
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:29:dc:18:35:71:8d:d2:ec:59:1d:93:1e:89:18:ba:3e:
74:f6:bf:37:ab:e5:25:46:56:53:42:d3:d6:73:68:68:15:36:
72:2f:f8:a0:dd:61:2d:17:9d:65:e2:05:d0:08:77:ae:f7:95:
94:33:e2:f0:07:2e:bd:a4:7c:db:3b:4a:1d:c0:ed:50:d9:e1:
ae:76:86:90:84:54:7f:b8:8c:a8:ea:91:9a:20:bb:aa:51:8d:
68:42:33:65:78:0f:df:7e:23:99:38:fc:9f:f7:38:73:07:b9:
bf:89:9a:14:40:5e:62:dd:53:12:9a:39:f2:7a:00:b8:74:f7:
12:f7:46:06:11:67:82:07:88:74:b3:d5:4d:77:c0:46:06:1b:
92:45:fa:46:ac:37:6e:73:33:e0:95:33:c4:3b:d6:b6:5c:6f:
ae:82:29:99:db:cc:48:eb:49:be:aa:71:fb:05:9b:ca:fd:5d:
8d:f1:c4:e3:c7:bc:31:02:09:9b:5c:aa:ab:b3:15:04:86:1e:
4b:e2:ed:86:96:23:64:a5:bd:e4:a6:55:da:96:e4:3a:9e:07:
7a:bd:9d:c1:46:3a:b7:dd:cd:08:75:46:87:ca:ab:0b:0a:2e:
cf:5b:92:2f:93:8a:d7:e3:65:88:e1:38:45:18:67:d4:2c:a5:
60:38:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:09:26 2025 by rpki-client