Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: s1K0IS9Wi4kp+oCDtiV/3zz1cbpl/y+/0hcbDq87JDg=
Subject key identifier: 1B:BB:A3:E9:67:78:A1:34:E1:B8:26:57:4E:EB:99:3B:74:1F:8C:10
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 0198D9607C4C39C260C8CA3CDCC4144FB716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 1626
Signing time: Sun 24 Aug 2025 00:00:35 +0000
Manifest this update: Sun 24 Aug 2025 00:00:35 +0000
Manifest next update: Mon 25 Aug 2025 00:00:35 +0000
Files and hashes: 1: 2ttxDr4pGnjxuFL3h06WTGhjE60.roa (hash: gb8hbvNo/pcY/swamzsbRwiOgi4eH7YRN51AtOhEfsU=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: e7wPeChpXTu3npu/bcsGntotC3WpM1g8SqOFePpLOCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:7c:4c:39:c2:60:c8:ca:3c:dc:c4:14:4f:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Aug 24 00:00:35 2025 GMT
Not After : Aug 25 00:00:35 2025 GMT
Subject: CN=1bbba3e96778a134e1b826574eeb993b741f8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:c7:7c:c9:a8:d8:e0:1c:d6:b9:33:71:53:
ed:3f:e8:a5:b9:d1:fd:59:a6:73:a6:40:41:dd:2a:
bd:37:7a:86:a0:c5:ce:f1:8e:12:f4:23:e4:c7:2d:
b0:04:3d:6b:d0:4c:f2:73:06:c0:7b:b1:dd:59:f3:
35:47:06:53:66:91:21:46:b1:72:cf:87:73:9e:6e:
dc:2a:ea:ac:7a:eb:b4:52:87:e6:15:5e:df:11:2a:
cd:24:e3:48:ac:f4:33:49:73:d7:1a:00:c0:72:f4:
93:0e:b0:fd:f4:8d:39:6f:6e:bb:d1:9d:0e:f3:91:
49:ac:69:c5:6f:f8:a6:93:23:6e:31:b2:84:53:95:
85:1f:d9:83:58:0b:99:d0:3f:8e:04:a7:c1:72:21:
8a:a3:31:55:3f:8c:ba:a4:eb:c6:85:9d:cd:20:10:
5c:26:e8:b9:f5:07:60:b0:dc:88:94:b6:67:70:a5:
56:33:1a:14:86:99:7b:db:95:74:93:65:4b:dd:4c:
5b:32:46:3d:42:18:6c:fb:90:e6:45:9a:76:73:b0:
0f:ec:35:13:9c:9f:73:c8:92:d8:c2:d8:a0:16:e3:
02:1c:c5:d9:da:6d:2e:78:7b:04:4a:bd:b6:80:a7:
cc:26:08:d1:d7:53:7c:42:37:7b:43:e1:0d:e4:5f:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:A3:E9:67:78:A1:34:E1:B8:26:57:4E:EB:99:3B:74:1F:8C:10
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:82:a4:16:bf:42:aa:fe:a4:98:fe:fb:df:b8:73:0e:fd:1e:
ab:08:0d:84:ed:f4:40:b0:5f:43:ee:c9:da:2f:8a:26:52:61:
fc:62:f8:c0:5b:1e:fb:d5:40:bd:8f:58:34:29:b4:74:61:7f:
ae:64:9d:de:1d:49:bd:d4:61:18:e9:ea:f8:e6:b4:8c:c5:31:
20:d7:1b:12:ae:2a:ad:27:f2:f1:3b:de:ba:17:9c:52:d9:15:
e7:19:7c:66:a2:b5:d1:ba:02:4b:07:e6:99:f8:35:ff:26:9d:
07:6c:81:ff:d1:af:d4:04:4f:49:23:ea:5c:15:bb:82:d3:86:
e8:ea:01:1b:07:cd:ec:d8:73:26:ba:78:0b:3e:dd:33:69:c7:
fc:f5:fe:38:90:0f:d6:23:b4:64:a6:0d:ca:8b:a2:a4:b1:3e:
78:32:02:be:fa:f5:6f:b4:47:b1:04:8a:c7:d4:bd:33:c3:25:
90:33:d8:ae:c8:97:7a:a9:ab:f3:f1:a8:c8:47:3f:2c:e1:c4:
d7:59:ee:48:8f:ff:50:3f:cf:98:80:8c:d6:38:94:56:d5:bf:
17:4c:78:95:b5:32:fd:2c:fd:11:b9:58:e8:1f:63:2a:0f:79:
dd:fd:2d:8e:c0:5c:d9:e1:d1:c6:9a:31:65:b3:f7:92:dd:80:
16:ef:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:15:28 2025 by rpki-client