
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: H45RliL+x9lKNyIoZjbAZpISfPN0AAlrQRSgJibq8fA=
Subject key identifier: 7D:21:39:81:F2:4C:35:BA:D6:9D:0C:BD:1A:E6:B1:D8:C5:64:7F:E7
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019874BD8F333326CA92AB6BF13F0E15FCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1498
Signing time: Mon 04 Aug 2025 11:00:36 +0000
Manifest this update: Mon 04 Aug 2025 11:00:36 +0000
Manifest next update: Tue 05 Aug 2025 11:00:36 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: ucT7VK6TDGVwMZYylLGLHAu9UIDB59IjB5RlL8vM80Y=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:8f:33:33:26:ca:92:ab:6b:f1:3f:0e:15:fc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Aug 4 11:00:36 2025 GMT
Not After : Aug 5 11:00:36 2025 GMT
Subject: CN=7d213981f24c35bad69d0cbd1ae6b1d8c5647fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:25:c3:68:50:b4:09:a0:1c:80:48:b7:26:
99:ef:e2:86:24:81:1f:17:08:ad:07:da:a7:55:40:
28:1c:9b:cd:3e:f1:09:9e:16:83:a3:2c:18:ab:ed:
a0:75:ef:f9:83:86:77:6e:15:56:77:62:68:4c:b7:
6d:9f:47:41:19:43:9b:38:f5:be:6d:ef:02:c3:e7:
99:65:b5:35:23:e3:54:38:fa:a8:f7:4b:e7:f2:8f:
f8:41:9b:f5:84:41:73:97:5d:bf:df:59:64:9d:04:
ba:4e:ce:d3:5e:28:4e:7b:d4:d8:ba:6f:9f:80:c4:
cc:36:56:1e:33:62:72:71:26:d3:f6:59:83:9f:2d:
da:6c:59:f1:fd:ec:c0:cc:48:0c:4f:ac:0e:cd:4c:
6f:d8:27:96:bb:ff:86:27:6f:1e:09:58:5c:ed:ab:
88:a3:be:9c:0d:8f:0c:99:17:8d:ba:11:b0:47:bb:
f7:9f:e1:1a:82:f4:0a:58:15:65:d3:2c:ee:9d:c2:
c4:e8:80:03:5f:93:d5:e3:01:6c:8a:85:f6:59:49:
33:17:56:e9:32:17:9a:83:8b:e3:46:d9:58:ec:20:
ab:46:71:68:77:23:65:b1:06:db:c1:32:d1:bb:a4:
08:18:5c:11:7b:ce:dd:db:7b:4e:8d:8d:e7:ba:e6:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:39:81:F2:4C:35:BA:D6:9D:0C:BD:1A:E6:B1:D8:C5:64:7F:E7
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:e7:f4:82:03:ba:62:d6:fa:07:3c:57:da:c0:86:23:fe:
4b:a1:0e:31:ae:a6:eb:ad:82:f0:e7:94:38:78:40:dc:80:2d:
db:57:38:7e:1b:53:e1:2e:77:34:50:20:e7:70:a9:f1:74:92:
52:e1:7b:a0:5f:b1:b1:b4:1b:ef:b0:7a:80:2b:66:89:25:d5:
e3:35:3a:7c:35:91:41:51:29:ea:b7:86:31:86:db:04:f9:62:
9e:60:bd:23:2f:1c:78:c9:2d:70:c2:90:5e:64:57:8c:83:c1:
fe:d6:b4:7d:f6:1c:c0:8b:b0:f2:f8:4a:27:eb:1b:21:eb:8f:
2c:7e:b1:34:b9:49:a3:2c:84:1c:64:52:5d:b6:0e:c6:cf:5c:
50:48:cd:b9:2b:83:ec:58:5b:ec:2d:2f:bd:8b:c2:21:61:17:
cd:ee:af:19:9b:44:7c:8c:50:dc:c2:fd:b7:4f:42:81:52:05:
bf:6f:c2:43:8c:a0:05:55:15:79:e8:d4:8e:47:5c:2f:07:71:
26:43:63:54:a2:70:c6:96:da:d2:24:35:c9:a9:77:de:ed:85:
12:03:64:ae:74:cd:ca:88:97:a6:4d:66:b7:fa:67:88:ff:24:
65:1a:90:9e:43:38:ae:0a:d7:0b:bd:d0:a3:bc:d6:07:29:c3:
88:39:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:32:11 2025 by rpki-client