
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: Zhz34b/vEI+pLdwb7xfzXmXyT46lKkmr30kSWwqgvG4=
Subject key identifier: CC:04:FD:60:EB:83:95:6D:21:57:BC:7A:D9:BC:D2:D8:34:79:7A:D7
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 01987D8BE47AF2C699DF1EB13811EF3E4BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 0578
Signing time: Wed 06 Aug 2025 04:02:56 +0000
Manifest this update: Wed 06 Aug 2025 04:02:56 +0000
Manifest next update: Thu 07 Aug 2025 04:02:56 +0000
Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: YifoZmV6kWJWVbEuV3MDKPU/+y+UFMQ0kWn0atxDPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:e4:7a:f2:c6:99:df:1e:b1:38:11:ef:3e:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Aug 6 04:02:56 2025 GMT
Not After : Aug 7 04:02:56 2025 GMT
Subject: CN=cc04fd60eb83956d2157bc7ad9bcd2d834797ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:dd:09:a5:02:88:cd:5c:b9:71:cb:a6:f8:
d9:fe:a9:03:41:ba:56:da:ba:7c:a5:cc:c9:eb:d0:
23:1d:93:ba:19:63:2f:46:37:b4:fc:d7:d4:56:98:
bf:af:30:56:91:4d:3c:c7:f4:28:f7:67:3c:68:af:
a8:f3:99:2c:d3:ac:cf:84:4b:51:08:13:7a:82:1a:
23:e4:3d:d4:54:07:8b:df:79:7a:2f:19:71:a9:9b:
26:37:a0:84:db:41:d5:18:cf:71:7d:5d:0b:4b:19:
ab:f0:16:72:68:e5:c5:ba:da:05:78:58:19:43:01:
87:8f:6a:01:48:d8:6b:dc:c8:84:ae:99:89:14:b4:
ba:58:6b:51:bb:4a:32:83:4d:a3:1f:27:c1:5e:a6:
49:05:ad:1d:ec:a9:03:10:2f:59:c9:9d:36:59:27:
e8:1f:39:57:9a:c9:09:b5:09:4d:31:10:10:fc:3a:
e4:b5:b1:27:81:27:4e:ee:57:80:63:6b:62:e8:54:
2f:6c:dc:dc:73:15:cc:bd:ac:f1:35:6e:12:1e:f8:
67:bc:b4:bb:66:7a:61:38:51:93:f2:59:e4:4d:4b:
7a:09:1f:29:6d:17:11:b0:0b:48:fa:dd:52:32:be:
28:5f:fe:f1:d9:84:cc:83:c0:da:ac:8e:13:d7:e4:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:04:FD:60:EB:83:95:6D:21:57:BC:7A:D9:BC:D2:D8:34:79:7A:D7
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9e:ff:eb:40:c7:27:e7:95:ac:85:87:d2:df:b6:47:87:f4:
df:3a:fe:41:c6:28:cc:a0:99:77:03:cd:88:6a:08:4d:d3:bb:
4c:8a:b1:5a:11:39:0d:29:59:80:6c:ef:33:a8:23:0c:f4:b5:
9a:ec:45:6b:05:b1:ca:a6:a1:90:06:2b:15:8d:87:d7:43:7f:
f5:a3:31:6f:29:6d:58:f2:a4:62:25:f7:a9:3d:c6:79:44:9c:
02:cf:e0:26:94:68:e8:18:c4:98:a1:e0:14:f9:84:c5:7c:11:
60:98:67:83:65:b8:a8:22:e9:3d:b0:a6:70:be:82:0d:ca:88:
08:88:8f:94:71:0e:36:f3:fc:dc:50:73:d0:11:2c:31:6a:c4:
07:51:61:c8:86:4a:1b:50:e1:c2:51:a9:69:a2:4e:cc:29:a2:
12:54:ce:13:9f:9c:28:2d:a9:d4:3b:6b:6c:8e:e7:c3:88:c8:
81:7a:3c:0e:27:01:5c:df:c6:b1:b0:ca:52:8e:a2:ec:2e:c8:
f0:c3:af:dc:67:9a:3f:1c:03:df:bb:2e:80:37:68:76:fe:f3:
85:91:77:ab:c0:14:35:ad:e8:2e:69:c6:a0:0d:e7:0e:24:1c:
a2:34:8a:37:b4:48:90:58:d9:d2:2e:55:93:8c:7a:fb:92:28:
45:cd:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:41 2025 by rpki-client