Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: 5E9ub4N4kFZ8hA+AbVHaKF3ICQH32D8LFdjGv41ipBo=
Subject key identifier: 7F:2B:14:3E:63:4E:60:1F:E7:33:F7:38:B0:D9:53:2B:53:6D:36:39
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01989781426362067E4BFA2A4F805CB312F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 162D
Signing time: Mon 11 Aug 2025 05:01:27 +0000
Manifest this update: Mon 11 Aug 2025 05:01:27 +0000
Manifest next update: Tue 12 Aug 2025 05:01:27 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: 9kfhjkqPcJG1HemSK+WpZsX8Xy5DW4R7H0TDeg0fxDk=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:42:63:62:06:7e:4b:fa:2a:4f:80:5c:b3:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Aug 11 05:01:27 2025 GMT
Not After : Aug 12 05:01:27 2025 GMT
Subject: CN=7f2b143e634e601fe733f738b0d9532b536d3639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:2a:82:1e:ca:b8:e3:4b:ff:7c:cb:2c:77:
21:49:a0:7e:62:ff:72:58:b7:b8:16:c3:8a:f7:c4:
90:09:1b:12:7d:58:cd:82:51:6c:24:01:c8:ce:9d:
be:d0:1a:e8:c8:f7:1a:99:09:8f:37:d9:24:60:94:
21:a0:db:d9:38:46:26:b3:e2:1f:a7:2d:9f:68:85:
e5:51:af:22:31:5e:59:0d:0c:4d:0c:99:c5:cb:a9:
77:03:86:c5:26:d7:58:4f:fa:ff:07:6b:d9:3b:67:
3e:d7:78:fd:ae:6d:10:23:d0:86:18:8b:8b:f6:94:
dd:d5:7e:55:48:b2:fc:4f:c7:04:ac:b4:a3:11:6f:
59:96:79:ca:cc:07:3d:47:2d:05:b2:c7:42:8d:58:
56:fe:8d:b0:dc:68:10:eb:52:68:56:af:1e:1e:ae:
f7:1f:c3:f5:ab:db:4d:fa:42:f2:b8:02:66:42:91:
63:b6:4c:50:bd:af:8a:48:ad:f1:aa:ec:cb:72:03:
6d:80:fe:cb:46:dd:16:c0:26:30:48:da:38:56:f9:
30:2f:43:33:e0:0a:9a:d8:41:a9:d5:71:83:0a:07:
dd:b2:1a:fd:bb:1a:12:05:c0:a9:2f:84:70:6b:7e:
f4:df:78:c8:8c:35:45:35:42:98:02:fc:f6:b9:e9:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:14:3E:63:4E:60:1F:E7:33:F7:38:B0:D9:53:2B:53:6D:36:39
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:79:d6:73:7a:7e:58:af:d2:38:4d:78:27:59:5b:f4:97:
46:58:02:ff:20:59:6e:d5:dd:4a:a8:ea:22:e6:2f:6c:e4:e3:
0e:cc:be:c8:b8:1e:60:0f:77:cf:b9:0d:b8:4a:40:34:f4:58:
36:64:be:02:b8:2b:b5:ce:f2:1b:08:5c:bc:75:d0:2e:04:c4:
7b:fd:ff:7a:11:71:26:f3:13:c6:26:ea:7f:d2:f8:8f:b6:88:
d1:57:17:f9:eb:b3:cd:6b:5a:8f:03:55:7d:bf:b6:f3:f6:94:
44:9b:bf:d4:d8:8f:b2:ba:7b:2e:b7:30:e2:90:3d:57:f8:79:
f6:e7:16:a7:c9:56:44:e8:b4:37:30:fe:5c:87:71:dc:22:1c:
95:1f:0f:ff:9d:e7:a1:47:3a:49:73:fa:c7:a2:a0:90:ba:2d:
62:72:78:c0:d1:3e:1f:e5:12:78:18:52:9f:79:3a:65:0b:29:
43:a3:7d:b6:b9:50:25:42:d5:01:f0:29:4d:30:53:d7:79:88:
45:12:6f:b2:61:9a:f4:38:d5:22:74:ce:f8:18:e5:65:09:b7:
d5:c4:54:1c:c9:37:20:96:79:08:2e:e7:a6:c3:d2:df:c3:10:
31:c5:d2:c6:d0:64:09:19:32:76:ff:f9:5d:9d:8f:c3:7e:6d:
6b:d3:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:06 2025 by rpki-client