Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: kw/cfRQANOBFi68uRz6OSHu0wFn89D1zloq3KskcdPI=
Subject key identifier: 12:4E:49:8D:36:3F:E7:4C:79:94:5C:1E:99:08:EB:39:16:5D:7C:78
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 0198752BFA16B504F9B5D6187AC334B31128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 13:01:12 +0000
Manifest this update: Mon 04 Aug 2025 13:01:12 +0000
Manifest next update: Tue 05 Aug 2025 13:01:12 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: vUZiR1EgCSjN7Dv3vKSzlHAbgy4ZeutrYw/E0U1rB7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:fa:16:b5:04:f9:b5:d6:18:7a:c3:34:b3:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Aug 4 13:01:12 2025 GMT
Not After : Aug 5 13:01:12 2025 GMT
Subject: CN=124e498d363fe74c79945c1e9908eb39165d7c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:0d:73:07:cf:89:44:54:8f:02:a7:6f:32:
3b:16:5d:fb:cf:b0:74:c0:0d:dc:51:47:26:ee:24:
56:74:8e:6c:25:74:37:54:16:88:26:5a:5a:e9:66:
fc:0f:aa:a3:23:3b:08:9b:98:cf:80:1e:46:8f:31:
9e:24:2f:03:e2:c6:cf:99:98:f9:ef:a8:4a:76:d0:
df:6f:1b:8d:4e:d9:4e:cc:fb:e5:64:54:b0:5f:5a:
7d:bc:e1:83:39:1f:ac:9f:e1:67:04:87:a0:d1:d5:
5d:1a:cc:a6:8b:66:b9:f0:3a:8c:10:6e:93:56:58:
1a:0e:47:b7:7e:9b:41:51:8c:3e:fd:1e:e5:d9:09:
65:40:db:99:20:d4:1f:da:6a:53:50:66:1a:da:6c:
d2:7d:76:5a:3e:a6:3b:45:db:de:d2:e7:c2:6f:18:
40:87:06:37:43:a4:f3:d3:64:11:a6:3d:46:35:7b:
65:ab:f3:22:e1:b9:b8:ab:a2:65:ff:1e:8e:5e:5e:
38:c7:8d:38:73:e6:4b:05:5a:32:96:97:73:2b:3b:
45:12:78:b5:c4:48:15:b0:89:40:bd:c2:6c:d7:df:
02:31:20:d0:14:64:15:0a:d9:4e:8e:75:e3:08:9f:
89:34:19:1b:75:4a:31:e4:52:0d:54:6b:01:05:85:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:49:8D:36:3F:E7:4C:79:94:5C:1E:99:08:EB:39:16:5D:7C:78
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d4:12:2b:d9:de:88:bf:46:fb:de:ca:22:d1:f6:91:e5:64:
75:40:29:e6:74:a5:f8:63:e6:92:03:c1:48:bf:33:b3:70:7c:
15:fd:7e:32:de:9b:d6:58:d7:01:48:39:23:bf:38:fa:b2:7c:
ed:8a:1a:34:8a:28:33:d3:59:c7:dd:7e:27:87:87:0a:8c:a3:
11:46:74:bc:1b:82:ad:ec:c2:6f:24:57:ac:93:4d:bc:10:42:
8e:d3:3f:a7:75:cd:34:05:5c:89:01:95:fb:4e:cc:b8:be:a8:
eb:59:40:39:eb:4b:ce:5d:98:49:d9:c3:5c:95:cf:50:1b:37:
70:6a:f3:59:e7:16:3b:37:77:37:2b:bc:78:76:d4:96:0e:26:
50:06:80:ff:35:38:44:85:a0:16:ab:e8:93:92:30:ab:ac:26:
97:ee:02:0c:9c:91:3f:cb:86:80:1b:7e:70:50:73:60:ea:82:
e4:87:67:93:43:3b:12:87:b2:82:22:2c:b0:f2:88:ee:89:06:
11:56:9e:a5:71:b5:59:9a:48:e3:9f:46:fc:92:08:64:98:a9:
dc:df:ab:e5:5c:0d:c5:8c:f5:24:8a:e2:05:24:6b:d1:c9:e9:
d2:6c:aa:3f:38:ff:cc:5b:74:b3:fd:61:98:7d:cb:16:fb:37:
c2:5d:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:48 2025 by rpki-client