Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File: j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier: AtZAw5RqdYIblRYjFy/ncr3Ek+m4tT9D3YdJX1X2kbs=
Subject key identifier: DB:ED:56:3F:70:62:9E:CB:FE:6B:E0:E7:8E:6B:AE:96:40:60:5B:BF
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 019889578AEF972149D4722DDBEDD8A78EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number: 10B1
Signing time: Fri 08 Aug 2025 11:01:12 +0000
Manifest this update: Fri 08 Aug 2025 11:01:12 +0000
Manifest next update: Sat 09 Aug 2025 11:01:12 +0000
Files and hashes: 1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: 2FZHUUk3UeQxagFpP8qwxo2g5Ngfwt1g09/8Biu+2lM=)
2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:8a:ef:97:21:49:d4:72:2d:db:ed:d8:a7:8e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Aug 8 11:01:12 2025 GMT
Not After : Aug 9 11:01:12 2025 GMT
Subject: CN=dbed563f70629ecbfe6be0e78e6bae9640605bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:d6:2d:3a:76:46:3d:52:e9:70:32:1a:92:
4d:e0:b8:1b:12:21:d2:2b:5c:6f:97:3d:f0:99:26:
3c:f2:ed:90:bf:f8:68:60:c9:e7:03:ec:37:72:e1:
fa:4f:d7:38:65:41:0b:8e:a6:77:6f:d2:96:fc:be:
1b:11:f4:99:a1:39:d3:70:f6:ae:ec:98:6d:ec:b5:
5a:eb:a2:01:29:7d:a7:43:49:81:41:4f:3a:53:0e:
da:28:f9:92:43:44:83:ca:a7:e8:42:99:74:c8:ec:
3e:78:82:2e:3c:ad:3d:a3:3f:79:dd:94:20:a9:98:
e3:fb:67:22:38:36:e6:76:4d:7d:2b:20:73:f4:df:
9f:6f:6f:33:ee:53:ed:4d:64:cd:fa:90:55:e1:da:
94:54:a2:7c:f4:cf:e6:9a:4d:08:f0:1d:fa:67:31:
76:29:6c:6d:24:d2:d4:63:7c:34:76:25:be:3e:a1:
b4:52:da:be:51:7a:a2:2c:18:ea:c2:0a:ec:2b:17:
89:c6:17:af:44:3a:72:5a:a0:d7:27:0c:9e:8d:31:
10:ff:2a:f9:10:c5:7e:0a:ca:4f:ef:1c:68:a8:26:
01:15:32:c9:78:ac:06:cf:28:75:03:4a:21:33:b1:
6e:c5:df:91:ad:24:b6:b7:1e:6e:8a:d2:f3:71:2f:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:ED:56:3F:70:62:9E:CB:FE:6B:E0:E7:8E:6B:AE:96:40:60:5B:BF
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a5:b6:1a:5b:02:89:57:56:bc:97:0b:ac:3e:f3:db:bc:f6:
22:e8:4f:49:44:20:ad:35:2d:af:90:fa:ed:c3:7c:1b:33:7e:
be:f5:e9:62:e9:e7:49:a8:7c:e1:18:10:d5:a8:ad:f1:b3:92:
a3:09:1c:4c:f1:6c:96:67:01:ba:8f:08:16:15:bd:9c:e5:dd:
52:76:dd:c5:c1:58:ff:ea:20:71:40:78:27:3d:bb:94:4a:ce:
fb:7f:0f:e6:79:f1:2f:f2:23:ea:79:49:e0:9d:8f:64:0a:77:
38:57:dd:2f:a7:cc:b7:71:8f:19:62:dc:3a:76:57:ad:0b:82:
e8:7d:d1:31:f6:4e:e6:90:0b:08:03:80:1d:12:3a:f8:15:c1:
35:88:ea:81:89:33:61:83:42:b2:43:db:6e:3f:45:5f:a2:ca:
b1:12:9a:c0:db:b4:f2:2f:69:7f:e7:ab:6e:a1:2a:44:b7:ac:
46:15:96:95:ee:ae:79:d5:a2:89:bc:61:89:fd:8b:3f:8b:ae:
bf:26:a9:03:9e:92:64:43:c1:7c:d6:66:36:2a:65:a1:c4:2d:
dc:e9:66:c2:38:a3:a1:55:23:ba:e6:36:be:2c:ed:c4:75:90:
00:b6:3f:d8:65:b4:7a:99:bc:8a:56:37:20:87:54:c3:ad:4b:
40:fb:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:21 2025 by rpki-client