Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 8UR6UI5mUh+2Y5hs7MMbuF9inYaNS7F8O7WHeeuDWUg=
Subject key identifier: F9:FB:9A:BC:61:72:03:DD:64:FD:B3:93:86:A9:BD:3F:19:29:08:E7
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 01983D612DBEDC7ECFBCD786DADCF75B0250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 14DD
Signing time: Thu 24 Jul 2025 17:00:35 +0000
Manifest this update: Thu 24 Jul 2025 17:00:35 +0000
Manifest next update: Fri 25 Jul 2025 17:00:35 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: nhyaMvIglKBl7FRmqNRGgeX2A1KgR/2t2jcrEjpROgw=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:61:2d:be:dc:7e:cf:bc:d7:86:da:dc:f7:5b:02:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jul 24 17:00:35 2025 GMT
Not After : Jul 25 17:00:35 2025 GMT
Subject: CN=f9fb9abc617203dd64fdb39386a9bd3f192908e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:b0:ec:51:9a:c6:4d:ef:2c:48:79:e8:34:
c6:e3:b7:43:c7:38:00:fd:9c:fc:b7:90:37:4f:44:
36:4f:10:03:64:62:fe:83:f8:40:55:06:09:23:2e:
14:31:72:5c:10:ac:30:60:a8:a9:61:70:3d:0d:d8:
41:eb:8d:c1:b4:36:93:8d:39:3d:d1:dc:0d:d1:3a:
10:49:62:1c:0c:aa:3b:9e:86:78:b1:cd:c8:1c:f3:
94:66:08:dd:fb:fd:44:6e:91:4f:e4:b4:9e:7f:e8:
3b:5a:b5:b2:18:b9:91:49:f2:c8:2d:2c:54:f6:98:
3a:35:d1:f5:71:e0:d3:2c:2c:9f:6b:8e:0e:5e:98:
b5:a2:4f:0b:9f:cf:22:06:e8:9f:40:64:ac:19:13:
a3:70:e6:1c:81:b3:ef:19:4c:88:55:2f:69:ea:6e:
18:da:00:7f:b2:2f:16:dd:a4:b9:c1:31:c2:ae:df:
fb:fd:21:f0:ca:40:44:ee:69:82:ce:ce:56:5a:a0:
43:7f:e8:3b:51:e9:9e:53:ab:39:8f:a1:9f:af:41:
54:93:e2:f1:68:7b:cb:4e:6e:bf:6e:ed:94:30:56:
22:bd:b3:65:53:95:cd:52:ae:6a:49:10:f2:bb:44:
ce:25:11:a9:f1:c4:79:b2:36:a5:75:3a:7c:df:fb:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:9A:BC:61:72:03:DD:64:FD:B3:93:86:A9:BD:3F:19:29:08:E7
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6a:eb:c9:c5:35:12:da:e4:fb:2a:78:00:ce:4a:75:a9:54:
6c:2d:ed:bd:60:20:96:a4:a8:a1:5d:d3:c8:3c:e1:fd:e0:24:
7d:f6:d8:7f:5f:92:67:f0:a7:76:c9:b0:3c:3a:99:80:c3:ba:
da:fc:90:8d:40:2c:cf:58:2b:86:ec:b2:59:40:13:6f:f7:bd:
9f:d8:37:50:91:2b:d9:9c:a4:e1:79:4b:14:45:45:a1:e6:67:
92:3f:76:ec:b5:a6:32:f0:db:c4:0a:cc:81:a8:2b:2d:97:35:
74:25:37:55:8c:fe:2c:3f:b3:7e:9c:67:12:7b:e3:8d:92:1c:
da:62:9e:1b:98:56:98:4b:8a:01:b0:4f:c0:be:fe:58:dc:84:
1a:f3:49:06:14:68:89:8b:33:28:2d:f9:3c:f7:0a:a6:1b:47:
9c:33:ef:c1:fb:7b:f4:ad:59:86:21:e8:79:a1:a1:d8:c9:3b:
ef:50:e2:6f:5c:a4:ea:e5:b1:08:61:1c:6a:80:ea:ba:ff:57:
e7:9b:14:60:06:23:d4:49:f1:ff:19:bd:e4:80:cc:a8:72:f5:
19:a4:b7:38:02:43:e6:11:5d:21:d6:27:11:fd:59:6a:44:6e:
d3:e8:01:f2:4c:68:95:24:f8:99:e1:0e:77:3e:9f:7e:92:a3:
54:24:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:59:47 2025 by rpki-client