Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: pqwq3CTyBwxl6mO7whqTxfGIQfiZvvRetkWRZcXsQEk=
Subject key identifier: BB:70:0E:7C:A8:63:1F:67:87:C6:3B:82:2D:B8:52:BF:C4:8B:0A:AB
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 01988D33DA55AC91E726C4F09965E4A444CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 05:00:42 +0000
Manifest this update: Sat 09 Aug 2025 05:00:42 +0000
Manifest next update: Sun 10 Aug 2025 05:00:42 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: c8nyJHOZ+71n6fEUmH02paCzexb6ZCfz1R6UYnJWrq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:da:55:ac:91:e7:26:c4:f0:99:65:e4:a4:44:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Aug 9 05:00:42 2025 GMT
Not After : Aug 10 05:00:42 2025 GMT
Subject: CN=bb700e7ca8631f6787c63b822db852bfc48b0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:ea:63:3b:56:8e:52:9a:f9:93:ad:ba:d9:
69:c0:5c:7a:5d:d2:fe:29:58:6a:7d:91:46:68:06:
c7:d8:96:98:a5:7f:13:6a:d6:59:87:5b:23:ff:ca:
00:82:6f:44:53:a7:cc:dd:37:a6:11:7b:33:a4:95:
35:18:82:ce:11:9a:c0:f4:7b:51:e8:cd:4d:a6:96:
e9:3b:56:26:73:6d:01:af:a6:6c:05:0e:0f:d1:1c:
2e:36:84:5e:de:f2:64:b0:30:7a:07:32:01:12:8f:
70:e9:bf:9d:df:72:70:94:09:83:b9:b6:e2:02:b1:
8f:9b:eb:61:fa:07:26:ff:a9:63:89:e8:97:0b:01:
92:50:95:69:03:5e:5e:56:8e:d3:03:b0:4d:8c:a5:
43:e3:d5:9d:ae:d5:53:11:82:e6:0b:1b:1c:68:4e:
85:44:c8:82:8f:0e:68:32:2a:d7:e1:ba:ff:2a:88:
aa:7c:2e:18:f9:f2:fb:ec:39:59:7a:84:f3:52:ad:
19:c5:2b:cf:e6:ca:d6:c7:9d:bc:ff:be:56:b1:6a:
6c:0c:44:b7:8d:83:b7:84:62:ce:25:67:d9:a4:fa:
d4:db:68:c1:f3:7c:69:f7:cd:95:29:a5:77:db:20:
26:49:87:d1:c2:dc:14:d9:0e:93:2a:a2:57:4a:1b:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:0E:7C:A8:63:1F:67:87:C6:3B:82:2D:B8:52:BF:C4:8B:0A:AB
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:22:ca:0d:22:da:42:84:51:ff:05:eb:44:b1:6d:7d:29:
78:1a:86:fc:54:15:3b:6a:70:58:6e:a0:43:b5:69:87:00:be:
76:cc:dc:d2:84:a7:c6:a4:87:93:9b:c6:d7:7b:8b:d7:77:79:
aa:0d:d6:a0:34:37:77:c9:3a:63:50:05:16:5c:b6:bc:6c:c9:
76:c9:3c:16:51:39:4f:1d:bd:48:d8:15:ce:83:0a:63:b5:3c:
fe:8d:26:68:8e:50:dc:13:3a:fa:dd:25:95:96:6b:56:69:47:
9d:aa:f5:67:fc:a2:ea:ac:f5:a6:44:1b:fc:ab:74:13:fa:13:
a5:8d:ac:f7:02:34:f2:33:75:2d:32:88:2c:f9:2f:af:41:63:
39:7e:b8:6d:bb:9a:25:17:92:2e:15:c1:02:dd:a2:ac:62:e1:
9e:e6:40:79:09:29:04:c3:a0:08:50:62:04:80:22:97:e8:dd:
4b:3b:21:f6:e1:72:38:80:25:c5:aa:b2:0c:73:9f:4b:8d:45:
5d:d4:b2:08:60:07:76:eb:53:7f:3f:56:e0:fd:4f:64:84:a1:
ef:09:30:34:b8:c9:39:30:65:15:a9:c8:1a:a0:61:0f:3c:c1:
f7:0b:dd:84:9d:97:25:6a:44:5e:bd:c2:8a:0f:c3:9d:03:51:
dd:17:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:09 2025 by rpki-client