Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: Pm6MkiR6ZrRNTfd86gviCw+4QRbfb3zBfzzVJDmLbyQ=
Subject key identifier: 03:3A:70:19:62:34:72:1D:FE:C0:04:BF:42:40:4D:37:C0:75:AE:85
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 01988279D6E76110D98E0FF13CB745261DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 04FF
Signing time: Thu 07 Aug 2025 03:01:19 +0000
Manifest this update: Thu 07 Aug 2025 03:01:19 +0000
Manifest next update: Fri 08 Aug 2025 03:01:19 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: 9yxRDxxVTiu1yOwjxmQjToXHXnSr3CRzQANNVbUjD08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:d6:e7:61:10:d9:8e:0f:f1:3c:b7:45:26:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Aug 7 03:01:19 2025 GMT
Not After : Aug 8 03:01:19 2025 GMT
Subject: CN=033a70196234721dfec004bf42404d37c075ae85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:7b:43:3e:ef:67:a6:e0:15:e5:17:69:a3:
fe:fd:9d:53:25:51:db:22:dc:a9:3e:a3:38:3a:44:
b4:17:63:a0:bb:3b:ab:c0:d2:75:8f:d7:a8:5e:3e:
a5:13:b8:3d:da:ff:5e:9a:21:c2:eb:09:e9:48:5f:
40:7c:f3:83:59:2e:4c:01:a2:af:b8:df:3e:7f:97:
7c:66:73:28:96:ae:93:64:7b:1a:41:37:69:a5:20:
d2:2b:20:58:e2:6e:ac:72:de:87:c2:d2:63:66:e7:
0b:fd:fa:65:b9:0c:33:d7:b7:a1:4e:23:ad:8a:e0:
82:1e:d8:26:34:32:61:7b:3b:60:a6:fa:4f:a4:13:
1a:ad:28:1e:39:89:af:fe:33:75:dd:42:83:dc:d0:
94:19:75:c9:84:e8:12:b7:3f:f0:4c:ec:f7:8f:ab:
fc:77:70:46:be:d1:ed:24:b4:03:68:f0:93:bd:00:
61:02:3a:9d:d7:26:2f:84:81:c1:5b:c3:79:26:80:
ef:69:2c:cf:fb:66:82:f6:26:7d:a7:14:09:f1:68:
de:66:98:33:dc:c5:c3:68:96:0f:67:7d:f6:35:2a:
1e:eb:3f:81:cd:32:dd:f7:59:e9:34:e8:f3:3f:e2:
75:c9:e1:1f:23:88:00:f2:b4:bb:28:25:f5:a0:8e:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:70:19:62:34:72:1D:FE:C0:04:BF:42:40:4D:37:C0:75:AE:85
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:de:90:15:59:2f:e8:6b:02:00:ce:4c:da:19:b3:0c:e6:c8:
7f:14:bc:8b:9a:76:69:23:6e:8e:b7:b3:8e:ae:b5:9b:1a:fd:
2a:ca:b8:08:0c:29:7d:9d:c8:e3:dc:b3:48:04:28:b1:b8:34:
71:d8:2c:69:2c:2a:c2:1d:97:35:91:bd:85:ea:d8:8c:48:98:
63:0f:b8:46:b0:2f:3c:6a:60:42:d3:42:11:45:7c:44:a6:73:
86:aa:87:57:03:a5:26:3f:6f:e4:ab:9e:3f:33:ef:1d:07:6a:
3a:f8:a3:c8:05:95:e0:b4:74:db:1f:f2:49:31:78:d0:60:1c:
c3:4e:1d:97:80:f4:cf:7b:e5:d5:d2:ab:bd:1c:b0:e7:e7:8d:
85:88:c2:4a:43:53:84:50:5b:6b:8a:f3:76:b2:de:8c:48:b0:
66:83:82:02:d8:23:a8:7b:ec:dc:ef:64:38:75:2a:3b:75:30:
92:6c:fd:52:fd:e7:9a:41:57:f9:59:14:d5:f3:b2:09:e7:3e:
34:07:62:4f:9d:0a:49:2b:e8:f3:99:23:8a:8c:5d:b6:4d:82:
59:73:67:1b:76:49:89:28:4a:86:1e:6a:97:6a:62:ca:4c:1a:
34:4a:46:88:82:38:47:9e:09:b3:bd:66:1e:72:cd:f3:f9:0d:
70:e1:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:43 2025 by rpki-client