Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: oYYwQI5oFLMt4aGQOq00lpfX67HwwghIt+BQv4xr0AE=
Subject key identifier: 24:B8:7E:F6:C2:4D:D9:57:A7:E3:9A:E7:A7:90:78:C1:89:31:8A:B7
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019881677BA54AA4A821C3CE7A4D2268342C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 04EC
Signing time: Wed 06 Aug 2025 22:01:39 +0000
Manifest this update: Wed 06 Aug 2025 22:01:39 +0000
Manifest next update: Thu 07 Aug 2025 22:01:39 +0000
Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=)
2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=)
3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: T663V1L45FDltPo9s/PVm6sVv34ehSY834futv6aXC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:7b:a5:4a:a4:a8:21:c3:ce:7a:4d:22:68:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Aug 6 22:01:39 2025 GMT
Not After : Aug 7 22:01:39 2025 GMT
Subject: CN=24b87ef6c24dd957a7e39ae7a79078c189318ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:96:83:0d:95:e5:24:91:54:7d:89:f4:e2:
93:8f:ff:19:0e:c1:5e:02:b6:a5:62:92:d4:97:5b:
e2:a6:fd:90:a3:c9:95:10:69:7b:5f:19:7b:6c:b6:
b6:33:62:56:2f:8f:7a:f1:36:a2:bb:95:5f:e5:9c:
40:8b:39:40:b4:5e:18:72:c4:94:2a:cc:d5:61:2a:
c9:d0:ae:73:45:26:11:7c:d7:af:82:3b:d7:d1:04:
f5:80:12:95:af:a6:66:9d:02:21:8b:72:4f:47:80:
20:c5:da:43:6a:20:40:11:66:1b:f4:e7:e8:27:68:
d8:96:59:f4:d1:5f:f6:ef:99:89:cb:a8:e0:d2:46:
66:47:99:b8:96:bc:6d:72:dd:48:3b:67:5f:83:54:
b0:09:65:51:4e:bb:23:fa:f0:9d:72:7d:eb:f5:bf:
56:45:2e:17:a2:ab:16:56:03:4e:0e:97:82:7a:5f:
77:d7:1f:19:0e:63:d5:46:6a:64:c0:20:60:8b:41:
55:6c:d9:eb:b5:92:bf:51:80:17:79:0a:89:ec:3b:
d1:4d:6a:a0:b2:9f:19:88:5d:38:66:c4:35:65:9f:
3c:5c:a5:7f:2a:29:27:1c:ee:1b:81:f3:51:01:4f:
95:76:a1:cc:d0:c8:f4:e2:0d:86:43:57:7f:46:c2:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:7E:F6:C2:4D:D9:57:A7:E3:9A:E7:A7:90:78:C1:89:31:8A:B7
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7e:0b:72:d4:6d:c0:ac:10:2d:88:39:dd:c7:d2:4a:9e:a4:
a4:76:4d:d7:6f:5a:82:a7:48:d5:35:f8:59:1b:16:6a:71:4a:
1f:c0:b4:00:c9:dc:84:a6:1b:d3:00:51:1b:3f:26:6e:ac:28:
63:2e:f5:53:c1:c9:c8:20:1c:08:33:0c:52:7b:0b:64:d0:e8:
62:59:cd:e1:b5:f9:ff:78:6c:e0:ef:7c:60:e3:1a:5c:56:29:
31:08:a5:46:33:33:b4:6f:5d:b8:01:b0:19:1e:20:c8:6a:54:
29:1b:e5:f8:5a:ee:a0:5c:d4:74:21:17:a4:bf:e0:8e:6f:19:
6a:69:cd:30:c8:7b:3d:e0:20:79:22:a7:17:5d:f3:85:d2:bb:
8d:5a:ba:54:00:9a:04:b7:ed:83:8c:9b:a3:c8:9c:8d:0d:3f:
85:d3:f4:67:3b:62:23:ea:a9:f5:f0:d7:b1:19:89:92:36:27:
f7:d3:9b:86:2d:d6:d2:55:b1:72:03:5f:e6:3c:12:df:17:bd:
9f:1e:cf:f2:12:10:04:d1:ea:2d:e1:08:b9:48:ad:01:35:31:
8a:0b:46:78:9e:5f:28:cd:ac:05:2c:f7:77:2c:cc:99:1b:7a:
72:80:f2:05:82:87:49:a0:80:7d:ef:df:ed:a4:51:fb:dd:20:
61:5a:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:58 2025 by rpki-client