Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: W5Qr7QCMiIlrL9wy2iA/mRom0bAWBFCQms7+OQcbuJ0=
Subject key identifier: 3E:02:18:53:D8:28:F9:4D:FB:98:B7:DA:9E:27:87:74:66:19:BE:D9
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 0198729853ADA37B056B91E2AA9D5F32DE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 02B4
Signing time: Mon 04 Aug 2025 01:00:42 +0000
Manifest this update: Mon 04 Aug 2025 01:00:42 +0000
Manifest next update: Tue 05 Aug 2025 01:00:42 +0000
Files and hashes: 1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=)
2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: sjtt5HFOUAnyJPbY1nBu7iCChGxQ0RHHcnw2jyE/fOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:53:ad:a3:7b:05:6b:91:e2:aa:9d:5f:32:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Aug 4 01:00:42 2025 GMT
Not After : Aug 5 01:00:42 2025 GMT
Subject: CN=3e021853d828f94dfb98b7da9e2787746619bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:6b:c9:ad:ff:54:03:4b:4a:80:86:8f:42:
8f:69:d3:d0:b8:54:3a:c7:53:e8:aa:33:8a:7f:96:
e8:a4:1f:93:ea:4f:51:de:10:31:3e:d7:9e:11:74:
41:2b:75:22:e0:93:ec:a0:b1:cb:52:30:f8:07:41:
18:ea:79:5b:37:19:b0:4c:ca:a1:f0:09:36:46:44:
00:56:d6:a8:dc:64:da:15:cc:9c:a2:bb:bf:b2:21:
88:d0:d4:1d:c0:0d:ef:67:24:d4:15:83:cf:9b:db:
88:b1:9d:a1:86:4c:49:a1:39:9f:2e:33:60:ba:6c:
b9:a7:d0:5f:b7:02:53:72:f3:a0:05:79:72:c5:a2:
11:08:b3:80:39:3b:ad:90:c4:30:de:aa:53:30:54:
63:32:e0:28:42:6f:5c:04:5d:a4:81:bd:27:f7:0d:
19:9b:5b:0a:3b:7c:f7:25:05:41:7b:40:15:3b:4a:
dd:fd:73:85:06:90:ae:2a:2e:f6:55:d6:0d:72:82:
56:c8:c7:0a:88:c4:b7:ef:0e:6d:83:1a:77:1e:3d:
ed:83:6a:8c:01:22:63:4a:6f:cc:32:9e:ff:a5:d2:
dc:91:38:e0:42:eb:51:d9:ca:1a:74:ee:65:f1:11:
51:17:bd:3e:91:73:e8:37:aa:bf:b8:e0:cc:5d:0e:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:18:53:D8:28:F9:4D:FB:98:B7:DA:9E:27:87:74:66:19:BE:D9
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:96:93:64:e4:4a:27:7a:ac:fc:bd:c0:75:cd:fe:da:4d:2b:
16:37:f2:dc:9b:bc:59:69:c8:9d:72:7d:b5:ca:91:12:ca:49:
d5:e9:bc:c4:59:e0:50:02:a9:17:71:2c:63:e9:29:d0:31:26:
69:3d:3d:18:b7:c0:01:ea:3d:e5:ec:4b:77:55:f7:23:81:5e:
f0:50:fa:1b:87:0b:db:39:03:ed:ab:9b:56:c8:49:27:09:a0:
e9:03:ec:ac:aa:0b:55:94:cf:5c:85:55:b2:32:81:37:3b:60:
82:d3:7a:c0:69:41:54:31:d4:99:e7:65:5a:27:b5:5b:3f:f8:
39:a5:4b:65:bc:4b:13:ca:af:9c:ca:e7:28:12:d4:8e:14:e8:
2f:67:69:41:c2:3b:ed:43:ba:50:92:d4:4d:5d:6d:21:dd:33:
0a:ac:e3:b9:68:b5:be:27:2c:1b:06:a6:68:f3:08:26:8f:9c:
d7:11:43:f7:4a:38:72:08:55:14:ec:45:a7:83:97:b9:4b:a7:
85:a4:ea:83:1c:fc:12:be:20:0e:77:e9:e8:7c:21:9e:ff:2c:
46:06:48:e8:63:cc:00:9f:b7:af:78:2c:b4:30:9f:93:ed:a2:
ac:b6:ec:4f:3c:57:0b:13:11:20:e8:45:95:b8:e8:b3:0c:f3:
ed:74:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:18 2025 by rpki-client