Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: /VLIlQ8JIfw58SZCLNiVr97bxZ7X+NRwwMjQEr1Dit8=
Subject key identifier: 66:C6:74:94:9F:43:8F:DE:FE:17:2B:E8:5D:A7:4C:32:97:07:1B:E9
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 019887D64B25461373773B352AF4ED419E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 1440
Signing time: Fri 08 Aug 2025 04:00:24 +0000
Manifest this update: Fri 08 Aug 2025 04:00:24 +0000
Manifest next update: Sat 09 Aug 2025 04:00:24 +0000
Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: RS/+eRXS08XetnjTXWIAshx5AuTAJQ7NFkaOHn8yY44=)
3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:4b:25:46:13:73:77:3b:35:2a:f4:ed:41:9e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Aug 8 04:00:24 2025 GMT
Not After : Aug 9 04:00:24 2025 GMT
Subject: CN=66c674949f438fdefe172be85da74c3297071be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:b9:d5:fa:cc:0c:ce:77:30:c2:e8:11:26:
be:4e:a2:01:ae:b8:24:8b:d3:a6:82:b9:36:09:fd:
e3:14:fd:79:5b:96:42:cd:e1:55:e5:9e:e4:55:8c:
24:24:b0:d6:e4:d1:1a:ef:30:10:b5:0d:cf:49:df:
d4:57:1d:5a:99:e9:d8:a5:2b:55:a7:2a:e2:6e:59:
37:cf:4a:9e:29:ed:49:b9:27:d9:c3:d2:be:70:84:
7d:da:aa:49:ac:ae:a5:ab:de:11:96:33:5f:76:68:
b1:0d:f2:5c:b5:0c:a6:a3:3e:1e:43:bd:2b:1f:48:
0a:4f:46:88:84:00:9b:5d:af:4e:3c:24:2e:25:6d:
4a:2e:a7:78:bf:b7:57:31:e4:e9:43:52:70:ae:83:
89:ac:f1:ec:59:34:ff:e4:8f:ef:a3:b7:c1:43:1a:
d1:82:cb:40:d7:a4:fc:f2:5c:69:96:74:b6:f9:9e:
bd:1a:f8:8e:d0:89:06:3d:74:cf:31:e4:93:11:95:
c8:c1:17:7c:45:d2:a9:c5:94:76:a4:8e:69:6f:e9:
17:56:79:e4:bd:ab:e9:b4:3c:f4:18:23:75:d5:b0:
00:80:6e:5d:dc:96:86:38:9f:4d:aa:a3:8e:e7:c5:
de:d5:bc:34:9f:8f:f4:19:92:f6:10:67:ca:4b:f1:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:74:94:9F:43:8F:DE:FE:17:2B:E8:5D:A7:4C:32:97:07:1B:E9
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ed:bc:d8:77:d9:fb:80:78:b3:7f:b6:8a:6d:cb:ef:1d:a5:
e9:e3:3a:35:6b:dc:55:7d:31:1d:3b:e0:d1:34:e8:f2:ba:46:
33:99:c9:ae:9c:92:1d:41:c8:c6:4e:5a:0d:3e:e3:b9:c3:f1:
2b:ba:6f:16:8b:be:cc:9c:0b:aa:58:8c:e2:48:ae:d1:c8:50:
63:12:f9:5e:0e:66:04:85:ef:4c:30:f4:78:09:2f:85:5c:f3:
42:2e:65:90:da:71:14:a4:e6:95:5e:db:ad:3b:34:ae:4e:fc:
d3:6c:1b:5f:fc:ff:29:50:0e:97:3a:49:c5:0d:6c:ee:a9:b1:
6e:4d:b2:05:c6:2c:3d:c8:f4:9b:d4:e8:20:5d:8c:97:13:6d:
c7:f8:f9:5f:a1:10:98:64:b4:f4:e3:c2:4a:16:4d:c8:f8:ae:
12:6e:24:05:76:9d:76:78:47:60:65:7a:dc:c9:f5:4c:a7:40:
78:aa:3b:97:dc:ae:ed:44:51:d5:bc:0a:94:d3:32:c2:a3:92:
15:32:89:05:5a:92:3c:ab:fe:3f:11:4f:86:d5:1e:c6:9d:c7:
80:4a:9d:e4:a6:be:ee:b6:18:3b:d5:9f:7f:1b:55:79:b2:cd:
85:51:b8:c7:a5:db:9d:a1:64:82:1f:a0:b4:c2:1d:6f:4c:da:
c4:52:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:23 2025 by rpki-client