Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: 5LpGhIZNJsodqNz+rcb5xKD1/S54uINU9Hp9cyyBqqM=
Subject key identifier: 91:A4:D9:42:15:40:0A:E6:43:A3:C7:9E:F4:75:D6:B5:37:7B:24:21
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 01988DA248FC01F0DE9A7FED81D0A0C77A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 1479
Signing time: Sat 09 Aug 2025 07:01:19 +0000
Manifest this update: Sat 09 Aug 2025 07:01:19 +0000
Manifest next update: Sun 10 Aug 2025 07:01:19 +0000
Files and hashes: 1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: eL0byQITZNAGPm3g7k4lUOZwfZvFoLgwege1n47uxa0=)
3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:48:fc:01:f0:de:9a:7f:ed:81:d0:a0:c7:7a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Aug 9 07:01:19 2025 GMT
Not After : Aug 10 07:01:19 2025 GMT
Subject: CN=91a4d94215400ae643a3c79ef475d6b5377b2421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3c:bb:64:b4:0b:02:b3:79:ee:fd:8e:74:a4:
f6:46:0b:f3:6e:3f:10:dd:a0:93:e5:40:94:98:24:
3a:d7:17:e7:87:be:d0:51:40:2b:db:bf:c9:37:07:
d1:85:a7:1d:40:54:13:82:4d:e6:7d:6b:a4:a6:d3:
03:60:68:12:bd:c6:5f:ea:57:c0:e7:7b:f5:0b:61:
37:fc:de:67:7b:d2:07:c4:2b:bc:8f:72:ed:4e:9d:
96:34:e6:73:20:5e:96:ac:19:71:29:f6:f5:2b:75:
32:fa:6a:8d:64:18:80:b8:98:b9:61:80:38:a4:09:
42:0e:fe:ee:72:90:e3:01:2f:c3:99:e7:c1:4d:78:
0b:ce:7d:2e:ea:7c:4b:cb:99:99:98:af:56:63:ca:
d3:c6:84:c6:7b:4b:df:65:6e:87:90:73:48:ef:7b:
77:a7:89:df:8d:1f:38:c5:d3:02:e3:a5:f4:a8:bb:
39:c5:23:d0:70:27:03:1c:b6:63:79:d2:36:78:67:
04:42:c4:08:ce:ab:fe:c7:99:60:e3:bf:2c:74:bb:
c2:27:9b:56:2f:08:50:23:92:0b:c3:4e:43:e4:2d:
f2:a2:ce:35:2b:eb:34:b5:03:f0:88:26:1c:18:f8:
c9:ee:22:e0:44:88:8d:12:31:17:52:79:70:fe:7f:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:D9:42:15:40:0A:E6:43:A3:C7:9E:F4:75:D6:B5:37:7B:24:21
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:7c:31:3a:1c:f9:c4:bb:ed:fe:4e:f2:a7:6a:f4:b9:bd:
1d:00:0b:09:c7:b1:61:d9:c2:47:07:a6:48:bb:0c:7b:68:0f:
d1:fe:14:68:22:58:d8:56:f9:37:5f:b4:dd:e6:10:de:25:78:
f8:1a:9f:95:fe:e9:af:f3:5b:a7:f2:22:19:2e:6d:fc:af:dc:
88:e4:47:f7:af:0d:7a:1f:78:1b:6b:c3:18:74:e3:3c:eb:22:
3a:e7:d7:12:f5:fc:22:28:00:3f:4a:a2:58:f2:11:93:40:8a:
b3:47:15:ea:22:f1:06:e0:e3:c9:47:c8:70:d7:cf:04:36:4e:
7f:d0:cd:8d:5a:fc:fa:e6:0c:f5:44:a1:30:43:9b:54:ae:66:
09:a9:1d:46:d0:84:64:04:2e:2d:3f:db:c7:7c:eb:25:2f:32:
e4:34:20:0e:8e:fb:51:35:15:45:48:6d:8e:65:e1:b2:cd:0b:
e7:cc:86:b5:83:06:c6:4a:7b:d0:9d:96:71:df:c5:dd:65:50:
81:b7:90:07:a4:84:45:f9:3c:51:54:48:ae:6d:5f:b0:8d:9d:
92:03:dd:10:38:1a:90:df:7b:88:d6:3d:4b:d0:03:04:8b:62:
a4:96:bb:b4:6e:01:9f:8c:55:a6:ea:7d:c3:2e:0e:da:fb:a4:
3b:59:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:32 2025 by rpki-client