Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: JyrdQZtHhdwZBfr53X2WX8C73PerIgwZY3SLml/4MBw=
Subject key identifier: 13:78:0E:2E:28:5D:37:0C:5C:8C:0B:E5:1B:6C:EF:28:AF:5A:24:6B
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 0198805456048B1AFD629CB14C9B23631798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 17:01:07 +0000
Manifest this update: Wed 06 Aug 2025 17:01:07 +0000
Manifest next update: Thu 07 Aug 2025 17:01:07 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: WjeeWwrakkfy4mbMKRwqP/Hv+2N5NvyrMNLt5GzyQkY=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:56:04:8b:1a:fd:62:9c:b1:4c:9b:23:63:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Aug 6 17:01:07 2025 GMT
Not After : Aug 7 17:01:07 2025 GMT
Subject: CN=13780e2e285d370c5c8c0be51b6cef28af5a246b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:d7:8d:17:4f:5d:9e:7d:cc:1b:d6:d1:1b:
15:00:db:9b:16:59:d1:d4:61:08:94:a4:f8:45:3e:
d6:89:cb:02:d1:b8:56:5e:ea:e8:f8:58:3b:a9:9b:
9a:14:be:81:f6:cf:08:5d:2b:ef:de:0f:40:40:76:
6e:e3:f3:cb:8f:5b:25:a6:ed:6f:99:a7:13:65:e5:
37:52:73:de:ce:cf:3f:d2:d1:94:a9:47:c6:15:50:
98:e5:35:12:e3:21:c9:bd:3d:14:fd:4c:3c:ac:7e:
25:74:a7:1e:95:a5:0d:c2:72:4d:cd:52:f6:2d:5f:
51:6b:34:7c:47:68:71:48:c9:60:d6:ac:28:58:40:
4f:59:29:64:89:03:1e:68:19:c4:b5:ec:92:b4:d1:
63:53:05:76:ef:f4:e0:69:a4:51:30:cc:07:69:3d:
48:15:c8:73:ba:8c:25:70:3b:91:0a:ec:64:a3:d7:
b7:ee:12:a8:e6:72:ab:b5:24:c6:9a:9e:25:b1:57:
b6:95:53:e6:ba:3b:55:d6:bb:8a:50:86:1f:05:f5:
75:a8:00:46:22:a0:c7:2f:7c:8e:ce:09:86:b9:0f:
5e:8f:51:cc:1e:6c:59:98:79:80:96:0b:bc:a4:b5:
57:fd:31:23:b8:1d:27:47:f5:0b:b6:44:be:89:69:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:0E:2E:28:5D:37:0C:5C:8C:0B:E5:1B:6C:EF:28:AF:5A:24:6B
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:56:76:e6:b6:32:c2:4d:f4:bc:d4:d5:6c:b2:20:7a:74:
89:80:e8:37:3f:cf:61:4c:ce:70:c7:17:dc:7c:76:eb:a1:8c:
5e:21:28:2c:a5:6e:ba:de:14:32:36:48:75:57:7d:83:1b:8c:
ee:b4:39:7c:30:7b:0e:bd:2d:76:4a:f7:3d:98:2e:e5:df:34:
e1:7d:3c:a7:01:ad:2b:0a:3b:1b:47:b8:c4:52:d9:16:ff:6f:
bf:39:99:2b:aa:22:25:15:86:98:73:09:88:1c:ad:21:87:8f:
bf:ff:6d:75:e8:b3:bd:1b:78:01:a2:70:91:96:f1:19:60:53:
d8:67:94:6e:9c:a5:0d:b6:5e:88:b8:51:af:4d:7b:b2:0f:da:
cd:41:f1:47:ec:24:68:99:91:5e:2a:de:40:b7:93:86:e2:9b:
da:39:90:ce:e5:4b:2b:08:85:97:35:2b:40:7a:ca:b9:b7:cd:
02:07:12:33:d5:07:0f:b8:f9:bd:94:81:32:bc:86:ee:d8:15:
43:28:c6:8b:13:74:74:36:80:ee:18:00:d4:75:a4:1b:2c:64:
21:32:e1:93:f7:29:f4:67:35:de:6b:40:94:06:9d:8c:3b:ff:
56:6d:39:fb:09:8e:d4:74:a3:6d:cd:af:bf:b2:57:0f:b9:ea:
77:c5:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:43 2025 by rpki-client