Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: X2x3PACeawadBkcx6IRAQFAz8VTgpM371wAuS07ZNG0=
Subject key identifier: A5:8E:F1:11:E7:52:5D:59:89:74:C0:C2:82:E4:5D:E2:83:35:8B:13
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019872CF4B2711CF21C6DEE292A766038BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:00:44 +0000
Manifest this update: Mon 04 Aug 2025 02:00:44 +0000
Manifest next update: Tue 05 Aug 2025 02:00:44 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: Yxtr0Azk+8cN2y+Sr1zO7/RP781UpxG2wBdq3PUp1mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4b:27:11:cf:21:c6:de:e2:92:a7:66:03:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Aug 4 02:00:44 2025 GMT
Not After : Aug 5 02:00:44 2025 GMT
Subject: CN=a58ef111e7525d598974c0c282e45de283358b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:c4:03:49:e1:69:2e:64:e5:cc:39:7b:0b:
85:50:ff:9f:55:e7:94:08:6e:db:98:a6:e9:8b:5b:
60:e0:f2:75:e8:e0:26:8f:a2:19:44:8e:da:d5:3a:
e9:c5:3c:6c:30:32:d2:58:dc:4b:a8:2c:29:c3:9c:
4b:d1:d4:6a:4c:21:ba:96:50:ac:12:7d:fb:c4:b6:
20:ed:42:3c:a0:8c:d1:5d:1d:9d:ed:e4:ad:da:3f:
df:fd:8c:58:5a:fe:5f:c7:4a:c2:04:f1:eb:81:00:
49:8b:fd:fe:44:24:c6:61:d0:9c:9c:ee:b3:59:24:
e2:88:70:63:15:52:06:d8:c6:ab:c8:ba:c6:f3:77:
eb:b7:2b:0e:c4:a0:e5:d3:bd:e8:f5:86:d7:36:a2:
93:18:2c:2b:07:e6:60:49:ec:bd:88:00:7f:67:f0:
25:5f:79:7a:d0:01:8c:c7:84:05:0e:9e:20:cc:59:
fa:31:d4:03:d3:ad:c3:ff:a5:32:64:56:f5:36:99:
e0:c9:5b:ef:24:48:b6:87:b5:74:16:7e:da:14:13:
ff:de:c9:75:e7:7d:96:fb:5e:f0:fe:4f:37:f6:75:
84:82:de:00:e6:c1:05:25:81:32:96:8c:32:bd:06:
67:38:88:83:26:ec:9e:f1:de:a0:c3:cf:57:64:ae:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8E:F1:11:E7:52:5D:59:89:74:C0:C2:82:E4:5D:E2:83:35:8B:13
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:72:7a:67:00:3a:e2:d9:46:68:a1:ce:fc:53:6c:fe:2f:
d0:3b:ff:61:13:0d:19:c2:62:9e:a8:3c:f6:e6:24:24:48:7a:
1d:f8:9c:ed:ee:bb:4d:e4:31:f1:97:44:2e:ae:a1:a4:b4:5d:
b4:9f:8d:c8:58:06:c3:98:6a:1a:3d:2a:36:d4:cb:c7:af:74:
69:63:81:7e:6a:81:09:42:c8:b2:b1:40:35:8e:65:22:d5:9a:
a3:e5:ac:0e:35:dc:1e:56:be:85:9f:db:7d:fd:0e:b9:23:ec:
f8:d6:68:ea:ae:a6:48:b5:c4:f4:17:47:5b:ee:d3:3d:da:0e:
4d:42:a3:8d:04:b5:52:7c:6f:07:54:bf:55:07:bc:de:4b:98:
9d:14:43:99:00:f8:50:7c:9e:92:2d:5b:89:b0:69:16:ac:7c:
cf:dc:a6:51:57:2e:2e:b8:f6:14:e6:17:6f:5e:12:c6:c6:67:
14:60:b4:50:95:6c:6c:48:a1:da:17:05:12:ae:9e:8f:dd:7e:
04:26:ab:8f:e7:df:0d:49:93:b9:06:98:dc:55:ce:d0:2b:a6:
da:db:02:5a:dd:d2:8d:38:c3:2a:6d:40:50:d3:c7:70:dc:95:
d6:4c:7d:7b:b6:69:47:d7:5a:1c:49:b7:8e:91:2c:bc:c1:d8:
78:02:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:02 2025 by rpki-client