Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: hthUSwuvpNP/njwPoa0kTFkcuIHKjKthiRLZpAzLpys=
Subject key identifier: F1:0C:B9:B2:8A:DE:A5:EB:C6:F3:34:A4:F3:17:F8:82:8C:D5:9E:A8
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 01989712A404DC9197420DE6B07E7DA43E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0F03
Signing time: Mon 11 Aug 2025 03:00:37 +0000
Manifest this update: Mon 11 Aug 2025 03:00:37 +0000
Manifest next update: Tue 12 Aug 2025 03:00:37 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: C4mZ/vE2FZBDjA4awpaGGoHEijRDA6QknLvi+9+ZOR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a4:04:dc:91:97:42:0d:e6:b0:7e:7d:a4:3e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Aug 11 03:00:37 2025 GMT
Not After : Aug 12 03:00:37 2025 GMT
Subject: CN=f10cb9b28adea5ebc6f334a4f317f8828cd59ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:90:52:df:d5:5f:2d:42:20:ea:be:30:e7:
82:71:de:97:bb:67:20:37:08:5a:75:97:c5:cc:1e:
77:48:5c:69:f7:7c:51:d2:6f:e9:2c:02:99:dd:7b:
c7:fc:cb:26:85:88:a8:6b:54:79:3d:9b:46:3b:9a:
54:5b:a6:6e:3c:b6:e1:2c:71:71:99:9a:be:70:30:
aa:05:55:fe:f4:dc:ad:39:b4:6c:08:18:e1:13:47:
12:e5:0a:0e:c6:cc:d1:7e:da:bd:ab:9b:a4:c1:f4:
4f:72:7d:c9:f8:e0:f2:18:d3:a9:03:15:58:02:86:
e2:82:b8:0a:4b:fa:3d:cf:67:f7:08:f2:7e:66:73:
de:0a:2e:20:51:3a:3d:c7:c1:1b:d1:2c:65:77:c5:
02:77:57:b1:86:9c:63:6d:42:52:44:30:75:36:d6:
a0:0f:1c:02:3f:63:d3:89:16:98:91:b9:6b:9b:f7:
72:d9:c2:d0:f8:4a:47:4a:d8:bd:5b:2e:2a:17:1f:
18:0f:16:80:32:dd:47:c4:83:1e:cf:4a:eb:c3:df:
1c:d4:2a:fe:20:bb:d7:66:ab:5f:6b:0b:e2:dc:c8:
21:04:16:f5:82:4d:31:17:75:df:96:1c:9d:f7:31:
36:f0:ad:f0:2d:a5:c2:f0:d8:97:9b:d0:4a:d2:b9:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:B9:B2:8A:DE:A5:EB:C6:F3:34:A4:F3:17:F8:82:8C:D5:9E:A8
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:05:82:23:22:dd:16:56:83:73:b3:9d:ce:ca:ca:f0:19:
ec:ba:27:09:41:34:95:9c:7b:96:e9:60:1c:2a:60:2f:70:9c:
c8:7a:3b:fd:04:ef:11:62:6a:d6:24:1c:af:74:dc:c0:72:1b:
43:23:02:16:74:08:d6:a3:6a:0f:7a:3f:67:c5:42:36:4e:59:
73:c3:82:a8:b0:e0:6e:59:d5:05:91:99:a3:34:49:28:59:8a:
13:67:eb:ee:b7:a1:21:b5:3e:63:a7:4c:bc:9f:52:96:ce:93:
1f:6d:db:7e:35:b4:17:01:18:7c:73:42:32:f0:ab:2c:c2:b9:
e6:00:d8:ff:03:92:82:29:8e:10:6e:33:ab:e9:82:c0:f9:9c:
ac:31:4b:4a:51:c9:9f:e3:a2:ab:46:d6:bc:b7:7a:82:9a:98:
dc:f7:bd:83:cf:84:e9:09:89:be:94:48:fa:e2:a4:76:c3:4f:
c2:da:29:b4:08:e5:dc:b1:be:3f:ae:b5:42:9f:3f:86:da:3a:
bf:6c:e7:74:a8:fb:b9:12:30:0c:ea:5c:50:87:39:40:77:36:
4b:37:41:bc:df:18:b5:59:db:44:5b:52:7d:10:cb:25:ec:0d:
d3:7a:62:42:60:b9:ee:50:fa:67:dc:60:8f:a5:97:1c:78:49:
a0:ce:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:29 2025 by rpki-client