
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: XcIp7mgFcsW7dxqMVVVmfUofMvBEHlWbtIuvkNVmmOQ=
Subject key identifier: 79:FF:9F:CF:CF:54:75:1E:F8:B5:CB:BC:01:F7:E2:2A:B7:F0:35:CB
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 01988B0E53FDC3FAC63EECAF0A95652F1E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 19:00:28 +0000
Manifest this update: Fri 08 Aug 2025 19:00:28 +0000
Manifest next update: Sat 09 Aug 2025 19:00:28 +0000
Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: pxSH383oxWdUoYxJbugUPar0bBkoHdbXDORv61/FyjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:53:fd:c3:fa:c6:3e:ec:af:0a:95:65:2f:1e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Aug 8 19:00:28 2025 GMT
Not After : Aug 9 19:00:28 2025 GMT
Subject: CN=79ff9fcfcf54751ef8b5cbbc01f7e22ab7f035cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:57:ae:7e:13:24:b1:e4:99:ba:41:a6:b3:
c3:81:9e:ec:3b:81:a0:f1:c0:49:a9:33:70:2d:eb:
01:1e:74:e9:b2:29:a7:47:2a:c8:8f:36:5d:90:52:
17:ab:7b:0f:d7:cb:1f:8e:30:cd:65:ee:63:c8:09:
59:ae:fe:b2:d0:50:65:f4:36:f2:5a:f9:1f:84:73:
de:d5:e6:b0:b9:ef:fd:da:4e:02:17:77:d7:3f:41:
e6:78:44:4e:45:10:13:ac:88:ff:51:cc:50:5b:52:
05:29:c4:46:d1:9e:68:d6:63:9e:3b:5d:07:4f:33:
5a:de:9b:e9:2d:c6:59:e1:dc:bb:14:80:31:cd:4f:
3f:cd:77:13:10:9b:b1:e3:5f:e6:4c:60:ad:1b:c2:
21:44:c5:e8:ef:dc:e7:d1:8a:3e:51:02:55:ec:f3:
fc:fb:f2:ef:d3:fa:14:2f:b2:9e:0c:2b:09:d2:91:
c1:c3:a8:6f:85:96:3c:71:91:ac:9e:19:93:78:f2:
5c:39:51:2d:32:0c:b9:b8:cd:1d:60:01:13:f1:de:
cc:17:6b:d9:ef:bb:27:83:6c:88:bd:95:98:93:25:
5e:4e:b3:11:1f:2f:c0:52:eb:30:fa:33:5a:73:ef:
fe:30:ca:d8:e6:67:c5:d6:8e:7d:c9:8e:86:83:fc:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FF:9F:CF:CF:54:75:1E:F8:B5:CB:BC:01:F7:E2:2A:B7:F0:35:CB
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6c:4f:a1:df:9b:b1:41:11:4e:5e:91:f0:c7:5b:0d:e1:79:
ae:3a:62:62:77:d9:df:7d:3d:2f:84:ce:f9:76:0e:fa:82:62:
47:32:13:4a:af:a1:50:7f:fb:a1:14:63:00:76:b5:38:2b:50:
2c:c6:82:70:7d:89:0f:48:e6:c9:da:0a:8f:0e:c2:ac:40:4c:
b4:dc:24:4c:53:b8:bc:9a:ad:8f:e4:d4:b9:b8:00:ca:0d:a9:
20:6d:ad:a4:85:24:bf:d1:41:d7:b4:c2:45:4c:9b:28:04:26:
fe:cb:75:de:32:53:e7:ce:d2:9e:64:48:a9:7b:56:2f:fc:b5:
fc:e3:29:ed:6c:f8:9c:86:3a:1a:c8:f1:ad:b8:f4:2e:9f:6f:
0a:fb:00:85:25:0f:2d:4a:63:8b:23:1e:74:d1:3d:c5:d3:ba:
00:d3:f5:96:c6:da:66:92:73:50:30:e8:1f:fb:1b:35:33:07:
93:28:d2:18:f1:b9:16:86:d7:96:1b:12:a0:0f:11:ed:0b:5f:
f0:a8:d5:d1:37:f4:fd:f1:07:66:0a:8d:e4:86:78:a2:45:cc:
d3:eb:b5:3e:49:a0:43:e3:44:bb:16:3b:8d:4f:d8:6d:71:a1:
39:14:a3:75:84:42:47:bc:09:4a:81:06:67:ac:41:a1:94:77:
17:a0:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:37 2025 by rpki-client