Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: mElG7BBPiRO9DxIDbAO8f1/fGpekktggEuHxTQStnow=
Subject key identifier: 1C:04:E7:6F:9C:78:D3:1F:01:A0:EA:07:B7:1F:F9:C3:8C:57:A0:66
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 0198748698DFBE864C6C21282227FAAD5411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 10:00:34 +0000
Manifest this update: Mon 04 Aug 2025 10:00:34 +0000
Manifest next update: Tue 05 Aug 2025 10:00:34 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: mbF9jJf+XWKi2sQzaAwqAlZ0QgG84BzSXdUJEsGqE14=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:98:df:be:86:4c:6c:21:28:22:27:fa:ad:54:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Aug 4 10:00:34 2025 GMT
Not After : Aug 5 10:00:34 2025 GMT
Subject: CN=1c04e76f9c78d31f01a0ea07b71ff9c38c57a066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:e4:5c:bd:c5:6f:89:42:f6:49:1a:aa:4a:
c3:2f:8c:2e:c0:11:89:95:85:9e:c9:9d:49:02:d5:
ab:3d:eb:1d:6d:07:f9:86:fc:b7:68:a2:b4:cd:f6:
f0:35:7b:e6:9d:e2:0b:3e:1f:78:50:18:c8:80:3a:
2f:30:b3:27:aa:55:a3:34:16:c4:2f:2d:80:82:e5:
a3:b9:ed:81:81:97:2c:6f:e1:dc:ee:88:70:ea:a3:
a4:0d:15:87:9f:d4:83:9a:25:02:a7:b6:99:18:3e:
3b:46:e4:bf:de:8b:8d:b3:d7:94:73:26:d7:d8:64:
8e:06:17:23:51:dd:62:0f:d1:e8:34:13:c5:b0:57:
39:19:2d:af:bc:20:63:aa:18:72:2a:a2:b1:59:78:
38:4e:57:dd:08:f7:29:f4:1b:ac:78:ad:24:05:65:
8e:57:92:17:31:c0:8a:71:5c:6e:b9:ef:96:de:cf:
87:3d:b1:b9:31:3a:4d:20:72:59:33:5e:dd:db:04:
94:41:9f:4d:b5:b9:d4:81:4e:35:be:a2:ee:fa:32:
c9:c2:aa:84:be:1b:9a:03:cb:28:bd:36:aa:dd:44:
59:75:a2:3d:77:36:05:87:48:46:79:47:19:fd:4c:
5a:bb:40:71:dc:25:80:21:fd:4d:11:cb:24:e1:6b:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:E7:6F:9C:78:D3:1F:01:A0:EA:07:B7:1F:F9:C3:8C:57:A0:66
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cb:65:0f:23:a6:40:72:e2:29:c9:84:0a:04:ff:0c:c4:b8:
33:48:5a:6c:5a:d1:50:6c:73:f6:91:20:e9:05:c3:35:81:09:
53:a9:b1:0e:22:fd:1c:93:83:e9:53:83:6f:f1:48:f9:5a:6a:
1a:73:9f:5b:d6:69:5a:3f:9f:38:f7:80:b6:d7:59:a7:b8:da:
f9:ce:50:8a:c1:ca:9f:0f:81:28:6e:0b:da:ec:d4:d1:a6:4b:
7b:a4:11:78:14:53:e4:05:4e:9d:49:0c:a0:c6:7b:4d:f3:cb:
46:90:2e:47:86:ac:81:6d:48:1e:87:be:6f:1c:3d:ed:55:e0:
6e:0a:3e:b3:da:39:5c:cf:22:b0:a0:2c:fd:f6:fd:56:31:88:
dd:f4:a7:c9:1f:96:3e:ec:e2:c8:fa:a5:b9:8d:30:9c:5f:38:
e6:ab:8e:f4:8d:68:27:b2:81:41:1b:f3:4c:fd:5f:99:30:17:
a1:ee:df:73:db:60:51:87:d2:5f:4b:9b:6d:63:17:89:1d:20:
96:1a:1e:ec:cc:09:58:c8:c9:29:e8:98:66:78:02:f4:96:16:
61:5e:f9:50:8f:71:b0:fe:f1:4c:9c:3f:c9:16:a6:76:c4:31:
0c:9b:f4:a9:94:eb:28:97:00:8a:1c:74:ed:48:36:18:3c:ad:
50:5a:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:14 2025 by rpki-client