Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: fgPaUdtY9thS3twOU+du3P9QMVKnosXUHTUUWpVFPZo=
Subject key identifier: 31:C5:D6:3A:F4:DF:A0:7A:88:D3:40:80:AF:27:F2:8E:3C:49:81:CC
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 01988DA1C83983381C6183CE8E6FE1948E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 07:00:46 +0000
Manifest this update: Sat 09 Aug 2025 07:00:46 +0000
Manifest next update: Sun 10 Aug 2025 07:00:46 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: 6+SdcqHRryj/scuc0KykqFH2JcOi97liP67TCGncxH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:c8:39:83:38:1c:61:83:ce:8e:6f:e1:94:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Aug 9 07:00:46 2025 GMT
Not After : Aug 10 07:00:46 2025 GMT
Subject: CN=31c5d63af4dfa07a88d34080af27f28e3c4981cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:69:63:48:91:b9:48:16:8d:dd:62:e9:50:
2d:05:42:cd:8f:ec:ed:dc:66:60:39:e7:c2:d1:f8:
fe:62:84:ce:c9:75:7a:1c:62:59:8b:10:bd:75:90:
81:f6:a2:06:36:4e:a9:d5:07:a7:d2:77:1e:df:cd:
c6:68:ea:65:25:c4:fa:67:0a:0e:38:05:69:31:6d:
52:a9:0f:90:7f:04:28:47:6a:64:e2:e3:ab:1e:7e:
a2:bf:eb:d7:ac:a7:1c:af:ea:88:6a:90:fa:1a:59:
ce:e1:b6:5a:7c:17:c6:02:0a:ae:fc:b6:ef:f1:8b:
7f:70:20:2a:7a:b9:f2:3d:83:d9:39:c0:af:5a:77:
5c:33:39:c2:9b:3f:0d:b5:fc:d1:a0:15:8a:0b:35:
1f:f2:6a:9d:3c:06:3f:7d:2b:64:1d:91:3e:c9:0e:
e9:8c:f4:e9:b0:7c:c0:06:d1:ac:da:f4:00:10:7a:
0a:f1:b8:55:b9:3e:48:f5:7c:e8:ec:e1:ae:05:b4:
8b:d8:e2:42:16:33:2c:bb:e6:4e:03:4e:36:89:75:
99:a3:a8:a9:53:c8:f4:30:e8:d2:b1:87:08:fa:39:
72:4b:b7:b1:80:30:bf:cb:51:b6:05:ad:be:6a:a0:
ec:fd:80:99:d0:26:3c:30:c2:d2:22:5a:5a:13:6e:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:D6:3A:F4:DF:A0:7A:88:D3:40:80:AF:27:F2:8E:3C:49:81:CC
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:c3:bd:2d:7b:3b:a2:75:a8:ba:04:51:69:99:52:15:0d:
64:58:88:84:52:30:5f:c7:ee:0e:40:ce:0a:f6:52:d4:6d:42:
f2:90:64:e4:3d:fb:a8:3b:2b:6c:37:2e:f8:b8:e9:ef:18:f6:
10:48:af:d5:a5:3f:e2:00:33:b7:9b:c6:f8:81:a1:62:29:14:
de:47:21:81:02:a4:5a:d6:c8:0f:e1:a1:c5:35:43:92:03:0b:
93:b2:d9:10:de:d5:7f:e3:91:be:ee:d9:6b:f1:88:e1:b3:11:
d2:1e:fb:70:bd:f0:0a:88:b1:8a:c4:96:48:0a:46:0e:84:60:
62:1f:e7:ba:3f:f7:e7:14:22:e0:30:ea:2c:43:8a:55:79:26:
8e:1a:81:a2:57:91:b9:e6:42:ef:5a:3c:d9:43:c4:ff:85:8d:
60:62:11:5a:cd:3c:0a:d0:11:89:d2:a2:20:2b:5f:ed:a7:17:
6b:91:d8:91:29:b0:64:5b:de:4d:4b:36:3a:18:80:15:e9:30:
54:ed:54:db:29:ab:eb:33:92:73:87:25:16:03:b4:71:47:08:
2c:0f:ae:1e:ff:90:25:28:87:92:3c:2c:14:58:cc:1f:3b:fc:
ce:04:f1:e2:a4:89:fd:8e:ac:65:72:b4:1b:8a:b8:fd:25:16:
ac:fd:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:58 2025 by rpki-client