Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: GzU9eCDrIhiTU3I8QgHzg9zsw047pAdyLZqnfTMRkOI=
Subject key identifier: 73:19:54:ED:EC:97:3C:66:AA:53:A6:AE:DC:48:DA:7C:A4:7C:F3:38
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 0198499C03F73A62564FC45A4666948BA8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:17 +0000
Manifest this update: Sun 27 Jul 2025 02:00:17 +0000
Manifest next update: Mon 28 Jul 2025 02:00:17 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: YhC4AODGdl65x2ohBFkeS5p4xko3SqFmKDKaOxCfh/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:03:f7:3a:62:56:4f:c4:5a:46:66:94:8b:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Jul 27 02:00:17 2025 GMT
Not After : Jul 28 02:00:17 2025 GMT
Subject: CN=731954edec973c66aa53a6aedc48da7ca47cf338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:a0:a5:cb:74:0e:1e:d6:cd:fd:eb:03:2b:
93:a2:54:f2:f5:44:fc:8e:06:f3:b1:90:ee:fa:9e:
40:a3:0f:99:d4:93:a0:e0:50:c8:c4:5a:a1:bc:cf:
36:44:70:30:39:dc:f9:ec:af:04:41:e2:ed:cb:02:
9a:95:e4:87:c6:8b:99:a7:2f:e2:08:82:5f:79:5d:
f6:a8:9f:e4:0d:4c:8d:3f:d5:26:27:78:98:9f:53:
e4:d2:6e:3d:41:71:44:a4:3c:60:5f:43:de:92:1e:
50:a0:08:d8:da:35:59:da:f5:76:4e:44:c9:9e:8b:
7d:86:a2:91:f7:e7:05:06:f7:14:34:79:30:31:55:
b9:d4:28:06:86:00:c4:05:2f:76:02:22:5f:56:c3:
81:f2:71:99:81:0d:59:3c:4d:24:ce:92:8b:41:66:
f2:48:ac:d7:fd:ad:f6:ec:3f:6c:9d:43:86:5d:e3:
de:97:49:70:bb:26:42:44:80:60:41:d1:5f:c2:aa:
f5:3d:0b:c0:8c:7c:41:9a:b6:4d:3f:7f:d9:32:39:
58:1e:91:85:57:da:e0:6a:ab:8d:9e:b6:0d:d3:ad:
0e:f8:dd:43:d0:9b:da:08:52:03:6a:f5:9f:03:71:
48:98:f1:31:4c:c8:a3:70:46:6e:33:6f:ed:ab:be:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:54:ED:EC:97:3C:66:AA:53:A6:AE:DC:48:DA:7C:A4:7C:F3:38
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0a:77:3d:fb:15:e1:04:48:72:8a:fd:f3:70:40:c3:6f:42:
ca:97:94:bb:9a:04:f8:01:c9:16:7d:2b:aa:d0:f1:f4:05:c3:
aa:90:9e:c8:d9:ef:70:55:fe:a6:2e:73:b4:08:13:06:88:7a:
15:f9:25:7e:50:2b:28:8f:d0:3d:81:61:1b:65:73:c6:2f:c0:
b2:0b:1f:30:d5:bd:b2:da:0e:80:3c:ed:b4:f3:ac:d5:ab:6c:
47:05:3d:0f:ed:7d:62:9b:01:c7:40:4e:10:28:f8:31:d2:4d:
4e:09:98:75:85:b5:e5:93:14:fd:f4:d2:b0:98:a8:98:6b:3e:
aa:b9:30:0a:a4:f0:71:66:8c:06:3f:e1:91:85:67:bf:76:d8:
43:9d:71:83:fa:46:b0:3c:7f:6f:30:14:89:96:b2:23:57:7b:
38:b3:a2:83:16:35:93:fc:ac:b3:84:07:b3:a8:6a:d0:6b:52:
e5:4b:a4:14:b9:8d:a3:cf:f9:67:8e:fe:5d:80:db:b1:47:ec:
d7:cd:43:0c:47:cc:c1:20:ec:f4:bc:d1:4f:35:16:46:eb:5e:
17:c8:71:8d:11:35:f4:90:7f:bf:b0:50:9d:57:19:d4:80:2c:
13:d2:d3:6d:a0:9d:48:9b:7a:9b:26:7f:8b:00:17:5f:9e:9f:
a2:e4:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:57 2025 by rpki-client