Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: ADHvIN7WupHJQ4ZmkqgKrLUoOWD2Gl4CN4F4PppxMok=
Subject key identifier: FC:54:0C:68:24:AC:A4:AD:D7:C4:D4:E7:13:B2:37:F6:F1:6B:40:BD
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01984061E6133AC73C5C92B8E34CE822E5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0625
Signing time: Fri 25 Jul 2025 07:00:14 +0000
Manifest this update: Fri 25 Jul 2025 07:00:14 +0000
Manifest next update: Sat 26 Jul 2025 07:00:14 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: 3LzuyTE1n4XBh+0XbKJL9+8lp1ZDW+8UfeuLlzQfTKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:61:e6:13:3a:c7:3c:5c:92:b8:e3:4c:e8:22:e5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Jul 25 07:00:14 2025 GMT
Not After : Jul 26 07:00:14 2025 GMT
Subject: CN=fc540c6824aca4add7c4d4e713b237f6f16b40bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:48:f7:ec:af:d5:f3:b2:20:30:b0:75:4b:
3f:91:99:62:09:45:04:43:dc:a3:47:61:d7:df:d5:
27:d9:88:ec:61:bc:3f:a5:46:de:cb:3e:51:8e:a4:
6c:2c:ce:d6:81:d2:cd:66:75:62:8f:52:60:c4:18:
91:a6:63:75:d1:e1:0a:94:62:60:62:28:89:8c:31:
18:71:09:07:1b:37:3b:c8:2c:d2:d3:8d:e8:db:49:
31:54:41:99:27:27:e7:13:f6:f1:94:d6:3c:2a:92:
d1:a7:d9:13:fb:2f:68:0e:02:4c:dd:b1:65:e8:8d:
70:36:84:4d:9c:1e:5d:7c:4e:e9:2a:dd:e4:68:15:
f8:b3:96:ad:8d:8c:be:90:7d:c3:78:64:b3:2d:b7:
92:29:6b:10:96:9d:13:7b:58:6e:0d:7b:bb:3e:1e:
5e:a7:a8:a1:c9:95:af:60:0b:91:3f:82:93:75:e1:
d6:94:ef:5b:dd:da:cb:4c:02:d9:43:01:c4:c1:b6:
4f:1f:30:65:79:30:cf:0d:67:42:b4:99:b4:b1:c6:
e9:7c:4c:72:dc:fe:29:a0:14:cd:88:6a:b7:c3:22:
5e:7a:6a:d5:c2:22:98:e5:21:dc:3e:96:bc:d9:44:
e9:42:67:e2:12:3e:9e:92:21:8a:9a:4b:f4:cc:e4:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:0C:68:24:AC:A4:AD:D7:C4:D4:E7:13:B2:37:F6:F1:6B:40:BD
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e2:e9:7a:83:d6:d1:b7:4e:a0:ec:9e:9f:35:74:3e:70:24:
2d:39:d8:04:ec:9a:eb:26:07:fc:67:c8:d9:33:64:67:fc:15:
4f:6a:27:c1:e4:77:7b:f4:1d:13:d8:2e:9b:64:c4:32:05:5c:
c2:8f:7a:08:65:12:8f:e4:f6:89:e0:7c:dd:82:b2:91:48:29:
60:94:be:d3:9a:95:8a:49:e9:c2:10:60:38:3d:4f:f9:3d:8f:
2b:88:7c:1b:5c:54:82:db:ae:c1:47:f7:86:a8:ed:51:b3:7f:
7e:6a:b3:c6:02:2b:e0:bb:a2:08:9f:a5:14:55:63:c7:8f:6b:
70:85:23:d6:9a:21:26:5d:ca:25:b7:a8:67:8a:13:7f:4d:98:
2f:ea:92:7f:24:e7:91:3b:9b:b2:8f:1b:12:bb:c2:64:99:35:
22:55:ae:82:16:32:13:ef:a5:07:85:84:ed:9b:fb:b8:7d:8e:
3b:31:30:ad:c9:7d:d8:21:81:bf:83:bf:6a:1d:e2:7c:cd:17:
4e:2e:d0:e0:d2:55:1f:a6:16:41:33:11:e7:76:17:89:a0:c3:
fd:5c:8a:0a:b0:d1:d1:3a:77:14:12:f4:64:78:9a:bb:a8:e4:
59:03:a7:4b:3e:b9:1c:91:ac:53:96:39:ce:00:38:69:d6:d4:
8d:cc:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:23 2025 by rpki-client