Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: rz+85pVCRW9dozs2NDTYO6KxbNDkuaAqeWmoK7b+fU4=
Subject key identifier: F0:0E:C3:B5:D1:72:4A:3D:2D:34:75:3F:77:BB:CF:2A:23:11:3E:7F
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019884D581B5161FAABBAF5429228BA843B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0F16
Signing time: Thu 07 Aug 2025 14:00:41 +0000
Manifest this update: Thu 07 Aug 2025 14:00:41 +0000
Manifest next update: Fri 08 Aug 2025 14:00:41 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 75IRYgT/BgJzUxv3plg+P2WNOP+A1xHaIc/RPxFy7Zo=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:81:b5:16:1f:aa:bb:af:54:29:22:8b:a8:43:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Aug 7 14:00:41 2025 GMT
Not After : Aug 8 14:00:41 2025 GMT
Subject: CN=f00ec3b5d1724a3d2d34753f77bbcf2a23113e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:ff:ec:96:83:ed:4d:f8:40:31:78:d8:e9:
a4:92:be:a1:b7:59:0c:5b:59:a2:79:33:33:60:1b:
18:50:f2:31:10:bd:a8:69:34:7d:3f:70:35:b5:ff:
c0:1a:78:cb:2e:43:1c:2b:0d:3b:89:45:ae:6f:1f:
fa:a0:b8:0c:17:8e:05:2a:a8:4e:ce:ca:9b:1c:c7:
97:26:3b:03:af:d5:eb:69:cc:a5:dd:dd:f3:5b:1e:
ae:32:2b:b3:46:6f:46:c4:99:53:2c:af:4c:f3:64:
30:12:8b:93:8a:08:e5:9d:28:41:7f:2f:93:5f:85:
70:10:c2:46:14:e8:ad:6b:0c:c0:67:84:f1:9a:7b:
83:01:ca:e9:54:7d:a4:76:0a:1c:56:d8:7a:45:67:
11:79:bf:e3:43:dd:8f:a8:52:3a:14:7e:92:a3:40:
1f:a3:7f:1c:fc:b8:49:ff:cf:c7:84:b6:dc:de:c8:
04:b3:6c:8a:3d:78:82:5e:a6:0a:92:a8:bf:b3:0b:
28:bb:b4:d1:1f:20:a3:90:d2:94:bb:16:c7:05:43:
39:ce:8d:d6:54:d1:74:99:32:53:23:f5:f0:3f:e8:
b6:1c:1d:02:e9:94:1f:95:8c:ae:68:73:6b:fc:c0:
b2:65:45:27:b4:ed:6e:d8:08:ed:9b:0e:24:92:ff:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:C3:B5:D1:72:4A:3D:2D:34:75:3F:77:BB:CF:2A:23:11:3E:7F
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:42:e6:a8:89:6d:cc:29:9e:72:46:37:55:44:22:a3:9e:
47:38:a3:db:00:7e:22:56:02:c6:3d:60:b8:56:5d:a3:f6:76:
9b:56:26:d8:76:59:2b:69:79:c9:a8:50:9f:8f:3e:25:f5:fc:
b0:e1:67:40:48:7c:67:1f:ba:45:3d:59:de:1b:a2:30:73:22:
fa:1d:2c:48:f5:4a:88:2d:10:64:76:0f:5c:8c:72:f5:f2:4c:
27:29:48:33:d6:7c:a8:2f:a4:2c:89:74:e8:e3:ce:77:46:c0:
3f:72:d6:1d:37:e2:33:ad:3d:ad:be:92:f2:32:91:6d:2e:4f:
57:01:c6:1d:09:16:f0:39:53:3c:e4:0f:76:4e:68:93:fa:a2:
01:9a:e6:23:2a:6d:1a:ce:38:c0:4b:4f:42:1e:ed:29:d5:22:
62:db:0d:47:85:85:3a:83:d8:25:6c:dc:1e:18:cd:a0:e9:f5:
f2:69:a8:2e:14:28:3d:4a:ee:ca:c4:16:38:f6:bb:82:c1:c6:
b6:71:e0:6d:13:8c:c1:bb:c1:96:f6:f1:b2:f9:8a:17:b5:3d:
c0:2e:e5:c6:29:f6:8a:f1:84:56:1a:65:62:be:7c:71:1e:c1:
6a:ee:bb:e4:5f:94:2e:72:ed:06:d8:0b:5f:ba:61:5d:63:3d:
3d:a4:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:59:16 2025 by rpki-client