Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: Xb+KKaBrM2WeROQ+6NrcWwwETtxG58oE3REVAw7RJ5o=
Subject key identifier: 35:05:60:E0:72:50:83:F3:AA:0F:CA:4F:AA:E5:47:F8:9F:87:76:21
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019839161A446D40F1CDA69E054AFE52FE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 15F9
Signing time: Wed 23 Jul 2025 21:00:06 +0000
Manifest this update: Wed 23 Jul 2025 21:00:06 +0000
Manifest next update: Thu 24 Jul 2025 21:00:06 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: n267KRgOg6JFlIQuWe4p2oGgsb1n5WykBrBEeP+BT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:16:1a:44:6d:40:f1:cd:a6:9e:05:4a:fe:52:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jul 23 21:00:06 2025 GMT
Not After : Jul 24 21:00:06 2025 GMT
Subject: CN=350560e0725083f3aa0fca4faae547f89f877621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:3d:d5:79:09:08:24:17:46:c2:ba:9a:33:
36:88:b4:ed:19:09:6e:2b:96:2c:3a:02:6f:86:b0:
90:c6:7c:fa:a0:de:0c:fe:be:d0:0b:af:d4:c0:3c:
f9:52:5b:cb:26:d5:de:c3:f8:9d:83:f4:ab:4e:f8:
e5:a9:8f:f8:08:a7:e0:73:a7:85:cd:29:ad:8e:30:
19:d9:1b:75:28:4b:1d:40:d9:d7:87:8c:33:7c:49:
e2:82:51:81:eb:13:85:3d:75:24:1a:f8:dc:41:5a:
7c:cb:5a:5a:1f:68:7c:58:c4:e8:15:1b:9b:9d:07:
08:a6:81:65:76:40:75:27:71:b6:7f:42:c4:c7:06:
39:2a:2d:c4:f5:ce:dc:23:43:3c:02:10:63:52:60:
18:77:88:6f:83:72:46:fa:cc:21:13:ba:5c:33:b2:
dd:3f:eb:09:a6:dc:06:7b:fa:f8:1f:44:62:60:d7:
4c:c8:38:d5:f0:3c:d6:cf:39:c8:ac:d7:e9:fb:68:
d7:a8:93:c7:6d:02:06:85:cf:ad:67:c5:82:a0:cd:
3d:07:cb:61:5a:b9:44:f7:33:a5:3b:57:33:d2:ba:
81:41:f3:eb:49:4d:f5:75:ac:7e:aa:4b:0f:1f:47:
f0:1c:4e:87:c8:aa:0a:f3:12:0b:86:27:01:99:79:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:60:E0:72:50:83:F3:AA:0F:CA:4F:AA:E5:47:F8:9F:87:76:21
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:07:f4:79:66:c1:03:e7:07:1e:4d:5d:63:43:34:03:03:c8:
a3:8c:be:c0:86:13:03:c5:48:43:32:70:8a:0b:b2:6e:9a:94:
25:f4:b5:72:ad:70:70:bd:23:e5:57:e2:83:e7:37:59:a1:b9:
ba:0b:fe:62:18:83:bb:44:68:51:79:67:5e:78:d8:c7:e5:e3:
5a:d1:1d:e7:89:7b:5f:3d:8e:8e:f3:75:e8:62:07:49:e0:1c:
a4:0d:7c:ff:91:c4:30:61:9b:c7:74:67:4f:29:f9:d3:fc:38:
68:e3:4d:3a:fa:a8:32:de:50:8c:26:05:11:1c:d9:da:91:3c:
8f:f3:a8:a6:33:33:95:14:b1:72:39:7f:35:20:c3:1b:3c:c2:
5a:1c:25:cf:56:cc:31:20:fd:f5:6a:e2:6b:4a:19:5f:2b:30:
5d:b3:5b:55:4f:e9:aa:db:54:a8:8d:98:c6:be:40:0f:7d:15:
67:67:90:57:79:6c:b3:48:03:fa:57:d0:5a:c6:53:69:82:c0:
8b:39:fb:4b:67:80:70:c5:a8:03:c5:6b:88:a3:ac:12:eb:bb:
5a:15:39:d4:01:4d:48:5a:7d:f7:76:a5:93:de:52:ab:52:e0:
3c:b5:35:2f:6c:4e:57:17:35:8c:c3:ff:8c:f5:09:c0:da:e0:
26:42:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:20 2025 by rpki-client