Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: qtSeYxRLwbSjuZuACg9l+CEXx2btTeGZx5x8thOTH2M=
Subject key identifier: 8F:EF:0A:15:77:D7:06:4B:4A:17:2C:D3:E0:7A:F0:BA:A5:C7:BC:15
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 0198714F40B34D18A8F83FA28B879AEA3AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 138C
Signing time: Sun 03 Aug 2025 19:01:15 +0000
Manifest this update: Sun 03 Aug 2025 19:01:15 +0000
Manifest next update: Mon 04 Aug 2025 19:01:15 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 97ZLMZU9ps30AzUO5C01M4wN9h6TgIHwr9EisC95jbA=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:4f:40:b3:4d:18:a8:f8:3f:a2:8b:87:9a:ea:3a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Aug 3 19:01:15 2025 GMT
Not After : Aug 4 19:01:15 2025 GMT
Subject: CN=8fef0a1577d7064b4a172cd3e07af0baa5c7bc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:b1:8f:ea:06:f8:7d:bf:97:9e:a3:14:df:
d4:08:d8:3e:8c:fa:5e:e3:0b:d4:b2:9d:2d:be:f2:
f6:fe:36:e3:bf:0b:9d:2e:c9:23:be:47:77:05:94:
6e:7d:81:ac:d1:db:31:86:63:9c:49:ff:50:37:f3:
e1:4d:e7:89:27:88:d3:16:ee:3f:66:98:65:d4:52:
af:b8:2c:93:28:cf:d7:1c:ba:22:67:99:47:10:72:
06:57:05:7d:23:a5:c4:07:98:6f:69:22:a4:72:36:
59:47:f2:6d:a5:b3:1c:99:79:1d:cf:7f:79:e9:c5:
6a:b4:5b:30:e4:01:4d:0a:f2:fe:1a:53:13:26:bc:
40:fd:6b:9e:54:ec:ff:93:99:b0:50:13:fe:31:36:
3e:5e:77:e8:89:16:93:15:01:6e:76:04:48:68:93:
d0:0e:eb:84:f9:27:0b:fb:e2:fa:5b:d3:7b:5d:9b:
6d:9f:9a:6d:c3:be:ba:7a:ef:94:bf:9f:57:76:e6:
e7:1c:c7:ea:ac:2f:78:e4:f8:1a:38:80:ed:10:71:
78:3e:b6:4c:b2:57:0e:8d:3f:c4:7a:8e:0b:57:bf:
04:45:c6:9a:c0:62:7b:3b:6c:1a:b5:93:36:58:25:
66:74:29:83:4f:a3:e3:ab:68:81:6b:a6:1c:7a:26:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EF:0A:15:77:D7:06:4B:4A:17:2C:D3:E0:7A:F0:BA:A5:C7:BC:15
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:2a:68:96:78:b1:e4:d7:3f:24:8b:c9:11:aa:96:f2:d7:
9f:e3:df:c0:6a:99:f1:be:3f:ea:d4:3f:d2:e9:5a:1c:6c:08:
50:6f:4c:43:02:50:30:fa:02:b1:ba:60:c6:71:e0:45:e7:35:
c6:a4:73:92:8b:66:4a:ce:b9:42:19:06:25:d3:95:80:0f:76:
61:7a:ab:59:60:2d:b8:39:da:31:bc:7d:4d:f9:f1:f2:15:83:
c3:58:fc:a4:e6:a1:a9:11:86:a4:1c:97:19:f8:fd:52:3b:7d:
0c:10:2c:b4:e5:16:8b:8b:4e:9d:77:67:d9:67:6f:3d:a5:10:
a1:e5:89:11:3d:c8:c1:57:ee:3f:9f:aa:d4:0d:5c:c0:74:21:
a2:e1:3f:ee:b0:78:06:47:f0:14:e4:a7:e6:73:f6:92:56:8f:
dd:a0:13:db:6b:eb:90:0d:d0:85:58:ce:15:59:9d:b2:38:01:
34:76:f2:a8:3e:6f:03:3e:42:ae:9a:1d:4f:6a:8e:c5:52:67:
86:a9:70:b2:d2:f5:f4:dc:dc:c8:3f:bb:36:ca:31:03:5e:ab:
90:52:d3:c3:6b:e9:3e:a3:1d:c4:7a:ae:cc:7c:a1:65:52:e1:
8e:90:b5:67:0a:bf:0e:9d:3d:a1:77:5f:0d:6f:c8:58:c7:87:
3e:18:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:57:57 2025 by rpki-client