Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: OGsNdCc02k3IRK3l+5VTevyJLcZuId/4GKs9K63J/Ik=
Subject key identifier: C8:EA:B8:26:0E:12:F3:B7:CE:DF:7D:D4:32:60:67:31:E7:88:13:7C
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 01984BC1495B178B60852E1CBCCA96E2B24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0EDC
Signing time: Sun 27 Jul 2025 12:00:14 +0000
Manifest this update: Sun 27 Jul 2025 12:00:14 +0000
Manifest next update: Mon 28 Jul 2025 12:00:14 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: afq6twxmI7SD35vIQ/zVCBmvxZmBbfx84+KTkip+7to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:49:5b:17:8b:60:85:2e:1c:bc:ca:96:e2:b2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jul 27 12:00:14 2025 GMT
Not After : Jul 28 12:00:14 2025 GMT
Subject: CN=c8eab8260e12f3b7cedf7dd432606731e788137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:a3:7c:ff:9d:f3:25:d1:20:04:7d:24:ec:
e1:ad:44:e9:fa:37:21:1d:dc:d7:2e:33:bd:51:77:
8a:ad:a0:70:9c:7c:ae:f4:ee:c9:98:cd:ab:86:82:
d2:b5:e1:f8:0d:85:6c:6c:ad:65:7a:ad:06:7e:25:
ce:9f:17:82:09:74:5f:a0:d8:68:8b:b2:b2:71:d9:
88:7a:c4:9b:62:39:7f:e1:c3:98:c3:9c:1d:c5:ce:
9e:71:f3:ad:f8:14:dc:e7:cf:cf:f1:95:c9:4e:7b:
5c:c7:a1:b4:c7:7b:fb:3d:65:8b:4b:c3:c1:80:10:
d1:13:7d:d7:26:bf:8a:84:e6:a5:18:d0:3d:b6:dd:
02:ae:07:97:ea:26:10:59:73:70:d3:5d:e6:b9:20:
71:6b:a8:bd:bf:88:ca:ae:7b:ae:6b:03:df:ed:37:
6c:7d:ed:1c:4a:77:20:55:c1:22:40:8c:4d:7a:53:
27:b4:5f:f7:00:c7:57:c3:a1:63:51:8e:db:71:93:
77:8a:4e:f2:2f:99:87:bb:0c:d0:04:be:1e:fe:52:
e1:2f:1a:c6:2f:3d:3b:70:c4:f3:38:a8:84:52:0b:
1c:e6:3d:dc:e6:7b:f7:34:ea:b4:f8:4d:a6:76:29:
f6:5c:cf:8c:61:89:3e:75:cc:38:50:d8:48:d6:c6:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EA:B8:26:0E:12:F3:B7:CE:DF:7D:D4:32:60:67:31:E7:88:13:7C
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a3:b9:62:5f:ff:0a:28:f5:ec:ef:01:f4:b7:ae:91:da:16:
12:ee:5d:81:fe:b6:8c:65:d7:01:78:b8:02:2f:7c:6b:6a:00:
6a:af:40:84:aa:08:d6:18:e3:41:ea:f7:5a:b6:58:6c:84:d6:
ed:93:e4:ab:74:ca:20:70:00:dd:8a:11:82:14:eb:3a:50:1b:
9d:bb:d2:c8:43:e3:2f:b2:88:8a:fa:73:5a:d7:bc:e5:ff:73:
6d:75:97:62:d5:e9:ec:6d:93:d7:c7:a7:bf:8b:44:f4:fb:57:
b6:7a:0a:4d:e5:6c:bf:02:3a:38:fc:16:3b:98:90:a6:78:2c:
5f:62:33:6b:30:87:81:1a:89:30:3e:bf:e0:9c:8d:c0:94:55:
2f:5e:0a:df:50:3c:d1:cd:bd:49:be:88:2d:9f:1e:5e:f0:f9:
e6:ea:b0:5f:04:13:d3:26:98:fc:1c:68:ca:33:21:3f:f8:39:
d6:e9:53:47:af:c2:78:37:9e:ba:45:7b:0c:04:1e:b0:a8:f6:
2d:e3:d0:c9:11:99:6f:51:69:f4:41:ae:3b:eb:51:94:0c:e4:
df:3b:ce:97:bc:76:b0:b5:7a:94:dc:54:b7:60:12:f4:bc:2d:
15:8c:59:91:54:96:a6:75:05:e5:6b:85:9f:2b:c0:90:59:b3:
47:7b:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:02:17 2025 by rpki-client