Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: gWoi95pPHqiTX9cuGGGyn7woNeH9C0RAOSNkgQiTLmQ=
Subject key identifier: 9E:EA:09:44:D2:54:23:95:DE:61:03:AB:5D:57:94:7A:A1:6C:65:32
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 0198D404573CAA68125CC2182EBD0D09073E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 07B5
Signing time: Fri 22 Aug 2025 23:01:50 +0000
Manifest this update: Fri 22 Aug 2025 23:01:50 +0000
Manifest next update: Sat 23 Aug 2025 23:01:50 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: 5lQxz7QD/2kPGcq96GmctXOuscnUwGWLwV91uP3u/lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:57:3c:aa:68:12:5c:c2:18:2e:bd:0d:09:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Aug 22 23:01:50 2025 GMT
Not After : Aug 23 23:01:50 2025 GMT
Subject: CN=9eea0944d2542395de6103ab5d57947aa16c6532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:b1:cd:35:7d:0f:79:0f:78:4b:d6:4d:f0:
60:bd:dd:6b:b7:57:e3:e1:69:59:57:45:67:58:24:
c0:30:c4:3e:00:05:bc:d7:b7:63:e2:16:cc:66:db:
c2:a9:01:d0:2a:8d:b1:36:47:59:b9:1e:58:6b:11:
5b:19:01:e5:e2:a2:41:d5:84:7f:b2:97:52:02:d6:
72:53:f5:4c:7a:6a:1c:70:a1:79:aa:f5:08:03:81:
5b:53:ce:34:c1:22:9f:eb:26:bc:a3:50:f9:ac:1d:
d5:b5:cb:e1:99:ef:dd:25:59:f4:cc:13:44:9b:60:
ab:c9:90:6c:c9:43:cc:1e:62:3d:24:c9:44:71:d5:
de:2a:fc:31:1d:b0:09:85:70:2c:da:9f:60:43:b0:
b5:a4:d4:85:a9:c4:1c:e7:52:4a:96:81:df:70:2c:
95:ec:16:71:a7:1c:c1:c5:6c:06:28:6e:d2:0a:52:
1a:f9:3c:de:1f:f9:33:41:a7:a8:d6:91:7a:fe:89:
05:b2:81:e0:58:39:5d:58:64:84:c4:97:25:ed:1f:
fb:c5:bb:52:61:e7:72:6c:a0:e6:50:52:80:3f:20:
bd:da:11:a7:4e:f3:be:fb:13:86:bb:71:cf:6d:e1:
4e:5a:8f:ac:72:b6:00:93:24:ba:b0:3d:9a:6d:c7:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EA:09:44:D2:54:23:95:DE:61:03:AB:5D:57:94:7A:A1:6C:65:32
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:6e:ff:3a:05:06:98:f6:5e:d5:95:c7:a0:dc:f8:3c:93:
68:91:f6:07:c3:26:99:20:2a:df:3a:ba:05:ff:77:79:65:be:
ca:09:e2:b1:ca:e6:ee:a3:7a:16:cc:4a:4b:2e:4e:91:5e:e5:
35:ae:3c:93:31:df:10:06:1d:02:c2:6b:f4:a9:c3:dd:cc:c4:
a1:7b:f9:c5:3c:d0:f6:03:a4:9a:43:82:32:14:93:d2:0c:9a:
0d:0b:82:3c:07:ae:d9:32:4a:fc:64:3d:4d:f1:42:c4:d2:4a:
be:33:f9:89:54:7c:c9:9c:53:ca:05:14:69:35:de:e1:5f:db:
8a:f1:2b:c3:8f:51:f5:44:0d:7c:2d:4b:55:1a:8a:95:3c:f1:
03:dd:8b:79:15:c8:ec:31:d0:23:00:b8:3b:26:5a:ca:98:76:
50:a4:58:5e:de:36:c2:ea:3f:e2:9c:32:06:5a:c7:1d:33:06:
b5:3f:df:54:18:26:e0:00:c2:29:84:cf:f0:1e:06:31:84:73:
66:d9:b7:37:89:e1:ae:95:d0:31:54:02:3c:34:74:4b:12:f7:
ee:1a:20:9c:52:66:20:e8:b9:a1:6d:27:25:ee:42:95:c2:9a:
a0:32:9e:90:b9:19:56:2c:79:48:88:a8:91:39:9e:91:60:9f:
98:95:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:21 2025 by rpki-client