Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: n05Q3VuyuBHEuhBw/XiSSTusu00R1SNuu5eEed6Sy8w=
Subject key identifier: 41:7A:9A:AF:59:12:70:15:F2:80:E7:12:C3:FE:C8:53:E6:3D:B9:53
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 0198D47266D3A9726F30E5B8B93478EA5591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: r3ubfk+OP3gZbFmLkiXVwSid1oWGr1J08GBslgmj0Hs=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:66:d3:a9:72:6f:30:e5:b8:b9:34:78:ea:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=417a9aaf59127015f280e712c3fec853e63db953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:30:6e:aa:8d:ec:8a:ee:bf:93:c3:14:01:
04:17:15:7f:42:db:ab:9e:72:7b:dd:e3:88:1f:ee:
69:82:51:8d:62:0b:cf:22:bd:a6:16:61:4e:88:46:
7f:8b:e4:d2:fc:4d:85:d1:9c:e1:54:5c:ce:a4:4c:
61:53:2f:36:8b:e7:cd:31:58:93:12:02:c0:8d:9d:
58:f7:c9:70:04:e7:c0:8d:16:7d:2d:56:91:75:d3:
bd:e9:89:68:f5:e4:7e:27:76:da:b0:43:c1:77:45:
3c:3e:55:f7:51:54:32:92:4e:8d:fa:b1:f8:5a:28:
6b:8b:ba:55:70:08:53:62:c8:9e:88:71:24:d5:a6:
be:ad:bf:a9:d3:00:82:af:69:fb:6f:f9:f5:7a:ce:
7f:46:a8:8c:69:d6:c6:98:7d:80:67:ec:40:f3:aa:
74:47:8e:74:19:ad:a0:97:dd:8f:6a:39:eb:26:16:
17:d2:c8:14:a1:93:0b:21:b6:fb:eb:70:14:ad:91:
39:ac:1e:65:4a:c8:29:46:80:c7:f4:74:45:56:7b:
3a:56:22:fa:71:82:2f:d1:c5:97:ef:e0:2e:1f:80:
9b:25:41:5b:87:fb:db:6f:0b:a7:0f:75:6d:4c:dc:
00:75:91:a7:c5:24:20:7a:f3:af:79:71:4f:d6:21:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7A:9A:AF:59:12:70:15:F2:80:E7:12:C3:FE:C8:53:E6:3D:B9:53
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:ef:73:c8:17:30:4b:3a:96:ab:55:66:3b:67:12:6b:ed:
30:e7:52:50:80:d2:b0:c4:91:6f:31:8c:c9:99:f0:0a:ca:ef:
36:ce:cd:e4:06:67:08:9c:a3:d2:3e:99:17:92:fb:da:dd:a5:
24:d2:0b:bc:67:eb:7a:3f:9b:71:33:f1:a4:c4:52:4d:83:bf:
7c:4c:74:62:a1:ac:67:92:f1:75:98:b3:80:83:52:bd:0c:e5:
25:c3:bb:44:0d:ad:a5:6d:4f:5f:f5:5f:a8:2c:c6:16:75:4b:
3c:29:94:bb:6d:a4:c5:63:a8:d1:da:58:d0:6f:1f:48:50:dd:
e3:d3:08:ad:2f:83:79:7b:3b:4e:10:36:1c:f6:98:59:8c:b5:
b2:ce:65:f5:1f:f9:31:6b:da:e0:7f:88:62:7d:e6:7c:50:e9:
91:f5:fa:c0:30:bc:2a:c2:9c:95:d8:6f:71:5c:b3:e4:e9:64:
38:9e:14:0f:cf:fd:0a:5d:80:d7:8a:8c:02:4b:58:43:a2:04:
18:95:76:09:6a:74:c1:ba:45:87:77:27:0a:4d:53:80:90:6c:
f4:4b:89:a2:b5:ca:b0:a1:fe:46:f2:d2:fa:63:79:ee:3b:da:
d9:df:ed:9b:f4:46:6d:f0:86:e8:7d:d3:ea:42:78:89:8c:3f:
78:08:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:33 2025 by rpki-client