Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: M/eCQz8Q0xxmh7JjjczuoYr2H/2PiNB527C3iDnBVWc=
Subject key identifier: F0:E6:A9:8A:2A:5B:35:C7:5D:81:AA:6F:46:83:D2:04:70:D1:E1:74
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 01987418A666DEB1A353BC4F08B9F5DBFF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 04A5
Signing time: Mon 04 Aug 2025 08:00:29 +0000
Manifest this update: Mon 04 Aug 2025 08:00:29 +0000
Manifest next update: Tue 05 Aug 2025 08:00:29 +0000
Files and hashes: 1: 9XlHb8rJg-OmDPMs6N_TKhkkHb8.roa (hash: cpk83kEdrOWJJYVKeP1fpe20g1cPT7sKTkIKvw0KJjI=)
2: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: V9E8zendZko3rlt4yShxnjyErwhKIfcPlKIHl/IvQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:a6:66:de:b1:a3:53:bc:4f:08:b9:f5:db:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Aug 4 08:00:29 2025 GMT
Not After : Aug 5 08:00:29 2025 GMT
Subject: CN=f0e6a98a2a5b35c75d81aa6f4683d20470d1e174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:5c:6b:67:00:bc:46:4e:11:2a:ab:3b:42:
22:f0:cb:a9:07:4f:7e:a3:96:af:5e:16:77:03:04:
cd:e7:bf:c3:e7:aa:db:8e:b7:4d:f9:6e:fa:0d:51:
4e:d9:b7:17:88:eb:75:cd:69:87:33:3e:f0:de:03:
97:90:0d:62:31:56:3c:01:65:ab:4b:42:26:9c:9d:
c4:a4:d9:c6:d7:f9:c0:e2:d2:ea:ea:59:62:f4:07:
01:91:77:df:04:e9:58:71:5e:2b:c6:e0:7f:ff:66:
79:66:ac:99:99:9c:28:bb:15:22:c5:40:57:d1:ab:
0f:4b:25:d2:88:4b:e2:4e:1d:86:7a:e1:5b:c1:c3:
ff:b5:6d:a3:25:80:92:ef:d1:3c:eb:45:78:41:ed:
7d:7e:8f:2b:15:d8:1a:a9:7e:c9:6a:da:16:3c:4c:
78:e7:8d:f7:06:2a:33:8d:e0:02:27:0c:c3:96:be:
33:1c:9b:2e:f7:b9:d2:ff:4c:56:8a:b2:39:ca:44:
b0:7c:62:2d:44:d3:21:fc:98:62:c6:bd:98:3a:e6:
bc:2c:fd:8c:da:b2:bc:6b:6f:12:a4:c4:cb:d0:ed:
e0:ca:b7:39:8a:62:62:5b:1c:44:47:34:3b:db:60:
b2:d0:98:8a:8a:03:c8:f7:37:64:fd:29:c7:0a:1e:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:A9:8A:2A:5B:35:C7:5D:81:AA:6F:46:83:D2:04:70:D1:E1:74
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d8:4f:ab:8e:35:3b:a5:b1:bf:d7:1a:d6:a3:79:e6:92:60:
ce:82:17:6d:a9:0a:fc:b6:b7:d8:33:ba:12:64:62:75:08:24:
b9:85:a7:70:55:e6:c9:00:dd:ea:20:0b:3f:ea:21:52:fc:76:
e5:74:59:4a:96:99:9e:df:e1:bb:9e:40:fe:0b:11:94:32:64:
5d:64:be:0c:c8:30:a7:7c:e0:30:a4:ee:2e:1b:97:da:7f:8c:
72:ec:e3:7b:7b:d5:6e:05:10:64:37:66:dc:64:ad:9b:a9:79:
1e:6b:35:ec:a2:6a:82:84:17:78:26:03:9b:44:3a:95:23:4b:
b7:ea:2d:55:46:09:4c:1b:af:64:c0:07:2f:8b:df:a0:98:6d:
13:f2:78:60:09:d3:aa:fb:f0:ad:96:2a:fd:8b:03:45:0b:35:
ff:52:aa:a5:6f:8c:ac:95:cc:5d:3a:34:ad:57:a1:e5:56:39:
e5:d2:ab:4a:5e:4b:6a:5a:b4:12:a7:4a:fc:46:40:23:71:51:
30:44:c1:b1:5d:99:b9:44:08:4d:7a:81:87:03:86:73:4c:e0:
21:40:e8:c6:ad:e6:33:d6:2d:06:99:69:5d:7f:a9:4d:4e:cf:
fa:d6:fd:8c:ff:e2:9b:b4:ca:e6:69:63:0d:68:89:35:0a:ad:
19:bf:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:29 2025 by rpki-client