Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: Vf13XczY/zG9ZEPI0+DyjFD0/70eDLejHvKSU2rCzu4=
Subject key identifier: 35:98:CC:42:51:5A:57:F6:B5:AB:39:97:5E:F8:3C:4E:C6:63:D3:03
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 01984A779A85B5E5C1B32FC15593EDCD87EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 0FFD
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: N7iYirBOB8YiWhd4Ih2EW8ZsSxH84LKqwpGx2u+8nIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9a:85:b5:e5:c1:b3:2f:c1:55:93:ed:cd:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=3598cc42515a57f6b5ab39975ef83c4ec663d303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:32:c7:63:ec:f6:d6:3b:13:e2:c0:37:fa:
f5:3e:c3:7c:af:a2:28:7d:30:37:ce:8d:3c:dd:ba:
69:01:a2:46:9a:81:ff:ce:e1:58:1e:ec:1d:da:2b:
88:f2:74:c3:33:76:e1:2c:ae:b0:a6:90:48:1a:31:
b5:dc:e3:01:ae:75:7a:5b:78:b2:c0:9f:a6:32:25:
ac:4e:4d:07:0e:17:30:b2:ca:0f:c2:d5:9a:2d:a3:
6b:b3:30:b8:3b:0a:61:38:84:ac:e1:7f:92:98:bf:
4b:b1:92:46:cc:4e:5f:33:30:8a:af:47:e4:cd:91:
76:f7:7d:ac:c2:d6:fb:3b:5d:da:c4:21:d5:ef:2f:
1e:6a:f0:99:a7:b5:eb:93:6e:ae:83:e0:4b:20:45:
e6:1a:41:e9:45:00:70:16:0d:08:03:30:60:0f:11:
26:f0:12:61:82:a8:44:5f:85:86:0c:ec:06:4c:9b:
f2:75:a1:ce:11:38:4a:b8:ac:e6:57:38:d4:44:26:
4d:6b:44:83:77:d2:eb:1f:2a:ed:2b:05:fe:4d:c1:
81:d0:f6:3e:62:bd:1b:8c:3b:61:88:17:cc:81:f7:
df:b7:25:14:2c:d5:0f:89:32:33:2f:6e:0a:2b:79:
ae:f3:3c:55:ad:a5:87:fa:0e:aa:50:f0:94:41:03:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:CC:42:51:5A:57:F6:B5:AB:39:97:5E:F8:3C:4E:C6:63:D3:03
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dc:12:93:bb:0c:88:71:98:ea:a1:9c:4b:b0:48:de:0a:5f:
d4:b7:3c:8f:1d:28:f1:38:83:57:d6:ea:51:f4:fe:dd:84:76:
89:0a:7a:ce:a2:0d:e9:da:1e:fe:b7:c3:2c:d2:a7:5a:dc:83:
2e:98:37:92:04:bd:ac:2f:d9:5b:41:62:32:2b:63:01:08:24:
ed:ea:d6:8c:8b:8c:f5:eb:d5:9b:8e:9b:b1:19:98:18:e9:25:
9f:c8:7d:ea:fa:3a:80:9d:73:0b:39:77:cf:f4:be:f4:aa:0f:
ab:3c:61:3a:d2:c8:f1:7f:42:c9:5d:8a:34:1e:99:51:48:a3:
76:38:d8:c2:17:fa:24:e1:87:24:6a:e2:01:b9:ad:9b:bc:5a:
4a:58:b3:97:dd:83:a8:95:e4:0a:63:8e:d8:b7:3e:42:62:c6:
69:48:d2:29:c9:2e:9f:b3:bf:5c:c1:10:e8:af:03:50:13:8b:
dc:47:54:c1:5d:92:30:bc:5a:76:6c:76:fa:88:6a:2c:6a:d8:
39:a0:3a:2b:8a:6d:e9:17:b6:f1:66:39:f7:7c:d3:00:a7:76:
d8:0c:2e:a5:dd:c1:38:2c:c9:f9:0a:4c:33:4d:26:8c:36:87:
6e:64:d3:cb:c0:f4:6b:1a:0d:69:77:14:3e:ce:24:91:29:6e:
f5:8d:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:50:12 2025 by rpki-client