Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: hSOy+z79za4fwWWT3b4+3JFNMVWVj04yE6MekMzgEjQ=
Subject key identifier: 06:77:D4:3D:4A:8C:86:DC:F3:F1:86:63:CE:90:4E:32:8C:3E:EA:3A
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 019849D2C23143DEA23F351D5541B8F21857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 03:00:05 +0000
Manifest this update: Sun 27 Jul 2025 03:00:05 +0000
Manifest next update: Mon 28 Jul 2025 03:00:05 +0000
Files and hashes: 1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: 3/yQHEWLELtTvnGmO9oP/H/igb8/8aGmHZGZNRDbXzI=)
2: OPRG5qVik0clg7wkwnl7SUN9jY0.roa (hash: ZN4J6ol4OC/X57nz18jc3tVUWSo2XvbIumwEP6WKJXU=)
3: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c2:31:43:de:a2:3f:35:1d:55:41:b8:f2:18:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Jul 27 03:00:05 2025 GMT
Not After : Jul 28 03:00:05 2025 GMT
Subject: CN=0677d43d4a8c86dcf3f18663ce904e328c3eea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:b3:1a:3b:6b:fe:f0:76:79:82:24:cc:90:
4e:c3:6b:bd:5d:bc:29:05:fa:d4:3d:e6:bf:5f:1f:
09:45:0e:8e:82:2b:0e:01:e2:e8:c7:99:ff:f4:0d:
89:a7:48:9a:f3:f7:53:cb:ed:3d:df:9b:d0:32:85:
c6:13:87:b4:7a:b9:fa:fc:02:30:80:19:c4:4f:2d:
1e:78:04:7e:94:68:78:dc:12:54:20:9b:5e:d3:fb:
84:d9:4e:82:f2:2c:af:40:e3:13:eb:51:23:df:cf:
81:f6:30:4f:20:82:31:ea:d2:44:e8:c0:58:49:b9:
ec:2b:4d:27:ce:c5:35:89:9a:d0:30:30:fc:fc:0d:
36:b5:6a:91:44:56:9c:33:03:b5:4d:be:52:45:70:
48:92:7f:7d:ed:fa:17:22:91:0f:44:00:4c:45:5c:
c7:d3:00:c3:ae:f1:8a:56:e9:24:5b:66:6d:4b:2d:
9e:de:63:ec:9f:7b:4e:10:b7:c4:c8:ac:f0:be:69:
be:0c:f2:d8:87:47:7b:48:92:f7:58:cf:36:a9:76:
0d:15:74:1b:b8:b3:77:3b:8b:d1:42:c0:53:39:30:
e5:24:3e:41:62:15:91:13:02:93:fc:7c:11:00:3f:
cc:33:17:37:3e:5f:2a:15:e4:d1:3c:6d:ce:56:a0:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:77:D4:3D:4A:8C:86:DC:F3:F1:86:63:CE:90:4E:32:8C:3E:EA:3A
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:ba:a6:cf:2e:d4:6c:58:b0:9d:47:96:62:1e:35:3e:b2:
b1:8f:c1:49:25:db:88:b4:dd:f6:8b:81:61:a2:1a:94:21:6b:
db:66:5d:18:d8:f9:87:ff:ee:60:d3:93:22:bd:2c:a6:57:d8:
b0:98:5d:77:bd:5f:75:88:51:77:7b:c2:6d:4f:a6:5b:bf:b9:
8e:cb:ad:f9:d8:b6:c1:57:9d:0b:1f:5b:c1:0f:c5:0c:6a:d2:
d1:6f:81:aa:e5:b6:e6:80:e7:6e:72:38:d0:ff:e0:46:c8:87:
c7:39:bf:8a:02:b1:a7:d4:01:9b:fe:d2:47:8c:1a:fd:10:a5:
7c:f2:ce:cc:b9:3d:bb:3a:97:d6:45:1f:c7:c3:4d:f4:78:55:
74:9c:43:28:74:0c:a7:86:97:10:4b:0e:a5:e0:63:f6:11:57:
3a:98:e3:7f:35:37:6e:22:30:07:b3:38:20:49:4f:65:96:ce:
9c:5a:27:5b:61:59:80:e8:f7:09:4c:11:96:3f:0b:a6:30:91:
df:6c:8a:e2:d3:42:f0:0a:6f:6c:3b:9b:d6:f4:14:bf:0b:c4:
4e:1f:c9:9b:f0:48:3b:8c:e9:b9:c9:87:cc:df:95:12:c9:4a:
fc:2d:97:48:85:10:30:4b:36:51:da:dd:fc:63:52:c9:89:1d:
ee:72:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:16 2025 by rpki-client