Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: GDyG6Dbk+5j4LhKbrtVTXvV5OSV6SOLXLcP096702TU=
Subject key identifier: C2:3D:D7:48:C8:2E:D2:27:04:8E:54:06:F9:5F:DD:D0:DF:33:3E:5D
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019873E32B013250CABD14B936558536F15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 07:02:04 +0000
Manifest this update: Mon 04 Aug 2025 07:02:04 +0000
Manifest next update: Tue 05 Aug 2025 07:02:04 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: YuRkQstw//AyEZZ9xLG20qOdJweg9mQd9b5PwSZFwYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:2b:01:32:50:ca:bd:14:b9:36:55:85:36:f1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Aug 4 07:02:04 2025 GMT
Not After : Aug 5 07:02:04 2025 GMT
Subject: CN=c23dd748c82ed227048e5406f95fddd0df333e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:ab:f4:e7:c2:5a:22:c1:78:47:60:2e:29:
a8:72:7d:3c:03:07:d3:db:04:17:e7:da:65:03:9a:
99:f6:fa:7b:d2:d5:43:a0:c5:49:1f:6c:70:11:dd:
e9:b6:7d:2c:0f:6d:cf:c6:93:35:75:ed:b9:b9:a6:
30:10:2d:06:09:6d:f9:c6:49:7e:86:56:d8:a7:c1:
92:b7:95:c6:f1:9a:8a:db:ae:b2:31:49:b8:28:a3:
35:85:fb:4f:22:c3:66:c7:56:5c:d6:e2:3f:66:ab:
51:0c:89:08:f1:5f:95:1c:1f:c3:76:af:7a:28:1e:
04:b4:08:e2:b4:64:f8:3d:79:b2:50:1b:9b:8c:cb:
5f:df:ec:1b:8b:99:4c:c0:b1:b8:19:8f:56:90:28:
55:1c:d5:48:7b:15:21:5e:79:14:26:f1:db:51:7a:
54:8d:24:84:dc:96:65:8f:84:f2:c3:b1:26:4b:56:
29:6a:68:e7:88:e1:9d:de:e2:77:82:df:97:e6:fa:
a6:94:28:a8:97:be:ca:06:3b:fc:34:f7:bc:8a:84:
f1:4c:f2:4b:be:d2:d8:a7:fc:50:86:8b:0d:96:61:
aa:26:50:3f:d6:39:f8:e1:5b:e9:fa:02:68:2a:85:
4d:a4:72:f0:f4:df:d4:c2:e8:21:73:40:6e:4e:50:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:D7:48:C8:2E:D2:27:04:8E:54:06:F9:5F:DD:D0:DF:33:3E:5D
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:46:96:a1:a3:a2:84:e8:84:cb:b3:f6:53:5c:cc:d3:45:
3a:db:83:6c:14:04:47:f2:6b:1b:bb:28:fa:70:9a:60:1c:44:
26:00:69:73:66:89:7c:a2:55:0d:0b:4f:70:56:da:30:fa:8f:
c7:0d:48:74:7a:20:98:f3:2c:16:7c:b5:77:6b:ef:fa:08:5b:
86:f2:7c:42:63:84:53:82:03:c8:c1:bf:2e:cf:23:ce:60:22:
24:ee:38:79:7b:27:34:aa:32:a8:22:28:82:29:ab:0c:ff:73:
da:32:6d:4a:03:44:40:bc:25:8f:df:25:1c:f5:4c:43:14:40:
f5:ec:e2:af:67:68:5c:d6:72:e3:75:f3:4d:22:33:00:bc:59:
90:08:2f:40:93:5e:16:a9:d7:28:cb:90:4b:66:a4:32:34:70:
02:58:b6:96:b5:df:20:f2:8b:b3:7f:16:9c:8e:c0:4c:a6:66:
5f:a4:07:61:6e:e5:7d:74:08:c8:af:67:90:9c:1c:46:8d:d9:
fa:43:d7:76:6a:9f:de:0b:b6:9d:9b:01:f7:ea:55:96:81:21:
df:6a:77:76:22:6b:23:6c:c1:5c:f0:72:38:dd:12:7b:e2:de:
d4:ae:69:53:db:1c:a5:45:64:45:dd:e2:fb:90:93:81:40:fc:
a9:62:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:02 2025 by rpki-client