Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: jUflXrP5SoAubMjx//oSiUM4nMwgzssHtIO+cVdmqnM=
Subject key identifier: A1:33:07:FB:88:38:EC:06:51:B3:75:F8:F6:0F:74:FB:5D:43:B6:8D
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 01988DA18506692793741EF4D68D13E6F6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 07:00:29 +0000
Manifest this update: Sat 09 Aug 2025 07:00:29 +0000
Manifest next update: Sun 10 Aug 2025 07:00:29 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: LghR2PX/CbjmYX6MCp66VEyFXcK3JHzKszBqjMguEm8=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:85:06:69:27:93:74:1e:f4:d6:8d:13:e6:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Aug 9 07:00:29 2025 GMT
Not After : Aug 10 07:00:29 2025 GMT
Subject: CN=a13307fb8838ec0651b375f8f60f74fb5d43b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:03:08:cf:d5:90:20:5a:25:43:65:f0:a3:
e6:f5:34:7b:bb:3e:43:0d:64:cd:7f:88:6d:53:d8:
4f:e9:39:68:2c:07:4e:b7:18:a9:3f:b2:a0:39:53:
d8:02:85:56:10:6b:d7:d8:fe:c1:e4:f2:f0:39:87:
6b:9b:7e:24:32:d4:c8:5d:a6:7d:cc:9f:59:ce:50:
c9:54:9b:76:11:23:7b:b7:4d:7a:f0:23:4b:df:1a:
8a:3e:5d:3b:d0:90:41:41:4f:1f:42:13:ff:d3:3a:
30:39:fd:d1:25:0b:8b:a6:89:56:3f:1d:f4:cb:11:
eb:cb:ff:f5:ec:cc:0e:29:b9:6a:5c:f3:9e:c6:a8:
8f:c3:29:85:61:4f:a2:ce:7f:6c:d1:e9:9f:92:0b:
9c:d5:f9:77:f9:65:99:cb:2f:73:d1:29:63:3e:c5:
ee:68:a7:67:8c:a9:48:33:8c:3d:da:28:d0:65:c1:
66:40:23:6f:4f:cb:79:47:62:e5:b9:80:43:45:1c:
01:f7:ad:79:2e:56:ae:fc:ab:9e:ff:2b:fc:20:db:
b4:e1:74:0a:c7:7c:26:6c:19:73:3e:c7:ec:d9:3b:
68:6b:65:c1:69:a6:53:5f:67:61:ee:93:de:f1:63:
1a:37:9b:a7:c2:6e:21:89:51:be:81:d5:57:c3:1a:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:07:FB:88:38:EC:06:51:B3:75:F8:F6:0F:74:FB:5D:43:B6:8D
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:75:ff:b0:5b:0e:da:65:cd:2f:bd:dc:fd:30:66:08:a0:d7:
0c:1b:6f:fb:9c:4f:19:8a:f4:2e:50:43:78:c4:a4:30:71:ea:
c8:00:8c:6f:97:98:3f:3a:99:5e:04:6f:52:60:e8:0a:f5:d5:
da:d4:e3:2e:9a:5b:97:28:ae:ac:b4:be:ec:dd:76:bc:fe:d3:
87:a9:4a:e5:0f:70:5b:71:97:56:21:92:74:e7:96:05:00:bf:
cb:c1:d6:2d:23:2a:86:4e:ba:f0:66:c1:80:a6:0c:8c:21:94:
d3:8d:6e:3b:75:f6:79:d8:c2:55:9a:c8:fa:d3:a2:47:71:e8:
78:fb:6b:7e:40:66:fa:35:b8:21:05:c9:5a:f7:83:fe:14:9f:
ad:44:e7:bc:02:38:96:80:42:a3:09:9f:db:39:f3:18:89:be:
f2:53:07:c3:1b:c0:c1:fa:12:73:f2:0a:0a:00:1b:2d:0a:34:
85:53:af:52:ac:51:4a:d6:39:6a:ac:f7:d2:37:b8:93:61:a4:
a9:a4:ff:80:4d:bc:ed:c9:05:27:24:8d:82:dc:04:00:4f:34:
03:bc:0b:86:ef:4a:ea:9e:7f:e7:20:6a:6c:ae:f7:b6:f7:f7:
54:99:92:49:e3:46:dd:02:2a:02:db:a0:cc:f3:95:96:bd:4c:
c2:e0:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:39 2025 by rpki-client