Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: BIfGyVraFQqQXnRnC66a98Npad+eWmlnL58FQ0tp2VI=
Subject key identifier: D0:E8:B6:6B:32:63:92:CD:5F:41:02:0A:BC:94:BB:58:CE:68:EE:59
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 0198744FD64651E7E1B94205C803AB7F2393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:00:45 +0000
Manifest this update: Mon 04 Aug 2025 09:00:45 +0000
Manifest next update: Tue 05 Aug 2025 09:00:45 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: SIZd6QeOw/5JXCI5WHFR6vNxQzbvsbFcBQbs0mVAjIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d6:46:51:e7:e1:b9:42:05:c8:03:ab:7f:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Aug 4 09:00:45 2025 GMT
Not After : Aug 5 09:00:45 2025 GMT
Subject: CN=d0e8b66b326392cd5f41020abc94bb58ce68ee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:f3:ab:13:45:00:48:0d:40:fe:d4:7c:c0:
51:83:74:de:8e:69:39:73:45:b8:2a:3b:ef:ea:f8:
9d:30:5a:44:4a:af:c0:a0:29:29:7b:50:33:24:2b:
c6:28:25:68:82:ff:fb:0d:6d:55:87:db:d3:75:92:
c6:66:57:53:b7:90:c4:52:7d:bb:e5:29:8b:49:65:
4c:92:a2:5d:09:bf:d4:f1:11:e2:45:9d:f5:91:9b:
d6:c4:12:e3:3d:1e:c3:3b:33:55:71:c6:7a:25:d0:
43:f9:4a:50:e7:00:22:ea:70:29:ec:69:ec:3a:bb:
9b:9c:f3:45:0c:50:60:49:55:97:08:bd:9a:d0:9b:
69:3a:27:bf:9f:f8:70:63:6a:17:ba:95:9a:e5:6c:
81:83:57:32:64:5c:4d:0d:61:3a:2e:dc:9e:04:5d:
ed:fa:50:40:5f:e3:51:69:df:3b:78:f8:50:f8:e7:
38:c8:66:95:9c:6d:6a:01:44:3d:5d:38:c2:6a:1b:
99:0d:3d:d2:2b:42:03:40:37:bc:af:68:10:02:75:
c8:3e:26:99:d2:42:0d:b5:93:2d:3a:50:e7:ff:45:
e1:ad:8f:44:0f:72:75:05:e4:03:9a:26:b7:76:ad:
0b:53:91:f0:5e:58:75:6b:1a:98:bc:61:e3:c0:e2:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:B6:6B:32:63:92:CD:5F:41:02:0A:BC:94:BB:58:CE:68:EE:59
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:25:5e:92:e4:f2:1d:0d:09:d0:b5:5c:77:a3:fd:a1:49:18:
9e:1f:87:e4:26:7d:3f:70:86:7d:f8:94:a6:c2:47:c7:be:9d:
8d:b6:86:e8:f7:c8:7f:47:ce:8f:76:74:5f:da:dc:9a:c7:ea:
c4:64:30:fc:5d:e7:07:89:ce:2d:1d:2d:0a:75:e0:e9:c6:9a:
c0:6d:77:6b:4e:a6:e1:99:53:93:63:b7:bd:13:f4:bf:cd:b0:
00:51:f1:f7:b1:2f:d3:2c:7b:10:97:69:fd:d6:03:91:4e:2f:
50:08:db:03:87:fe:00:4e:ee:63:96:0f:ed:c1:1b:39:af:21:
43:a7:4a:56:8b:a5:af:18:11:95:68:85:36:74:1a:bc:7a:17:
9e:7e:39:f7:8b:da:5e:51:6c:37:1b:69:2a:56:09:bd:84:31:
46:d5:98:09:2c:12:0f:e5:ce:28:f8:07:d4:59:98:91:a9:a3:
30:03:a5:4c:f6:3a:74:3d:3c:af:7c:f3:a0:2e:92:f6:98:9b:
77:a6:e6:99:ec:c0:68:e2:69:9a:33:1c:46:bf:2e:72:39:13:
4b:c4:da:d2:00:15:b7:ae:d0:87:73:32:02:1d:f0:df:61:c1:
58:5e:b3:9e:fa:78:a5:87:17:50:05:3d:02:77:54:27:2f:36:
31:02:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:06 2025 by rpki-client