Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: xPO7MEpaYtA67uZ/7ze5W/wmXW37o+rwlF9nCqx+B5Q=
Subject key identifier: 25:CB:C0:17:EF:8B:58:16:52:19:6C:A6:44:31:B5:33:6A:B7:44:EE
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019872D00424789DC4AF9D040E621CAEE6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 0725
Signing time: Mon 04 Aug 2025 02:01:31 +0000
Manifest this update: Mon 04 Aug 2025 02:01:31 +0000
Manifest next update: Tue 05 Aug 2025 02:01:31 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: rviKG6QRXn/aW9+PyWh7JjSBNN3miMdwROsQwKM/erY=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:04:24:78:9d:c4:af:9d:04:0e:62:1c:ae:e6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Aug 4 02:01:31 2025 GMT
Not After : Aug 5 02:01:31 2025 GMT
Subject: CN=25cbc017ef8b581652196ca64431b5336ab744ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:65:06:70:40:05:2f:95:ff:33:e9:29:75:
85:98:05:26:2e:2f:65:fa:34:93:1c:dc:5a:28:f3:
e8:be:98:0c:ea:7a:08:77:de:12:45:7a:f3:17:b7:
da:e9:b8:be:6a:f8:3c:94:27:9b:a5:b4:14:b4:b4:
ca:06:ba:39:76:97:a2:7a:95:5d:4e:07:a8:41:c2:
6f:1c:8b:15:0b:d2:11:0d:37:6d:53:a2:10:b2:b1:
7f:60:89:54:99:6d:93:ab:5a:00:14:00:2f:4b:70:
4e:55:97:a6:98:43:de:35:f0:0f:17:2f:2a:86:cf:
41:a5:ea:85:97:71:fb:f7:0c:5f:be:55:97:1b:c9:
e1:bb:50:fe:cb:1b:20:76:82:f7:df:85:38:8a:41:
24:d7:a0:2c:40:df:e3:a3:f3:d1:71:ec:4e:e9:18:
50:a5:47:8a:e5:0a:e0:bb:c8:da:78:bd:db:ee:9a:
31:72:89:ea:3b:b2:6b:ed:6e:3e:4a:24:9e:46:63:
23:a8:ce:34:f6:55:fc:7f:4a:4b:08:7f:a5:a0:ba:
e0:40:c3:90:55:a3:1e:d9:35:82:33:56:1a:74:16:
3c:95:11:4b:c1:f7:a8:18:e8:bd:5d:d7:18:4c:0e:
c2:bc:35:63:20:18:df:40:37:c2:8a:d3:33:2e:e5:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:C0:17:EF:8B:58:16:52:19:6C:A6:44:31:B5:33:6A:B7:44:EE
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:c0:42:13:4c:3b:87:f3:e8:42:a5:d4:05:bf:94:2b:7a:
62:74:2c:5b:08:83:3e:3e:0b:02:dd:e6:2a:de:c3:bd:45:11:
44:7c:a7:3b:14:af:e9:2d:2e:25:31:42:a9:e1:60:b4:97:f6:
0f:d6:a5:dc:9c:30:90:f4:5f:00:ac:6e:40:cd:ae:74:ef:65:
8c:88:d1:69:2c:69:95:f1:24:f3:6d:e8:f5:e5:b9:9d:d5:1a:
6f:1f:cb:05:6a:93:8e:59:ea:66:87:5a:be:7b:14:05:be:ea:
38:b2:6e:98:8e:bc:ec:0c:7d:13:f8:13:ab:25:a3:b7:22:18:
58:51:45:bf:27:85:9e:a5:95:98:5b:c7:63:2f:5c:9a:fe:f7:
d6:f3:7e:f4:ff:31:25:db:6d:6a:04:80:b6:9c:2c:72:5d:86:
e4:d3:80:17:4b:88:f2:0b:62:63:05:56:74:74:c2:db:8b:f8:
7f:f8:b3:a0:5d:96:c3:96:86:00:d2:8f:45:4f:79:56:a6:b6:
40:84:48:a9:f6:cb:f4:48:98:8d:35:b2:67:9b:8f:24:e6:7f:
59:34:9c:f5:77:58:54:1a:62:38:19:54:f9:7d:a7:e8:0c:44:
58:8a:5d:6d:b5:fe:21:2f:85:8d:69:be:59:95:f3:5e:62:e1:
b0:54:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:29 2025 by rpki-client