Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: hCiOC5LsCtaNVUpYvuMBbugBALVMufi2422YNRxHp/o=
Subject key identifier: 51:97:1E:03:3B:BE:01:DE:2F:B9:D4:23:52:17:13:33:77:47:56:EC
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 01987D8B1AC3B5F8B02AEBFC11E31D14E269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 04:02:05 +0000
Manifest this update: Wed 06 Aug 2025 04:02:05 +0000
Manifest next update: Thu 07 Aug 2025 04:02:05 +0000
Files and hashes: 1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: cfUba6IT6D9pGTgpu5B2Wbx+xosx0FtfwIXc638r6F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:1a:c3:b5:f8:b0:2a:eb:fc:11:e3:1d:14:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Aug 6 04:02:05 2025 GMT
Not After : Aug 7 04:02:05 2025 GMT
Subject: CN=51971e033bbe01de2fb9d42352171333774756ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:cb:35:59:01:c8:af:9c:06:5d:cb:44:54:
aa:b8:18:62:b0:7d:1c:32:bb:8c:76:90:21:9d:31:
7a:6e:9f:bf:34:e3:2b:9a:99:51:a5:36:ff:6e:3c:
a6:b2:23:b4:c5:0d:70:62:ff:f8:17:cc:18:cd:3e:
aa:bf:a2:9f:c1:70:8e:9e:a8:66:dc:bb:27:10:2c:
5b:f4:00:e3:62:ed:f7:0e:42:c4:79:65:6f:f7:1f:
b2:cc:60:21:df:7f:6c:3c:e9:1b:a4:e8:0c:0c:6e:
d7:90:65:c5:ee:0e:30:a7:eb:3f:1f:ae:93:19:ac:
c5:cb:75:23:7e:90:c9:fa:0b:6d:22:26:e0:1a:82:
3c:1d:6f:cb:4a:42:18:0e:57:ef:20:39:6a:98:00:
17:9c:f4:4b:20:42:71:6b:da:8b:41:21:5e:79:89:
e4:bc:73:59:78:36:9c:05:e5:e1:6c:81:f6:85:eb:
ce:8b:b2:af:7b:ea:c9:71:58:f1:a2:c1:60:16:66:
23:ad:f7:d1:f4:bd:61:84:c3:ca:98:c6:39:ba:1f:
3e:f5:0a:b8:2c:84:6d:b8:0b:fe:50:07:26:d8:95:
da:b9:f4:12:f9:09:6b:9c:96:74:32:2c:aa:92:04:
e9:40:73:96:07:7a:bc:f9:e5:92:37:35:d2:e9:fb:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:1E:03:3B:BE:01:DE:2F:B9:D4:23:52:17:13:33:77:47:56:EC
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2e:6f:35:3f:58:bd:ae:6e:d4:19:98:c9:96:10:d9:51:0b:
d4:4d:8c:fd:43:03:d1:d3:fa:b9:a2:c4:bb:83:f5:b5:64:c4:
bf:13:73:0b:d8:11:a7:3a:70:78:a0:79:bf:1d:41:1b:5e:fc:
20:9a:11:ee:9c:46:2c:c1:c5:cd:a4:20:24:2a:ce:d3:b4:27:
8f:b8:30:1f:f3:dc:ad:dd:2a:e6:09:28:d8:44:58:f6:88:68:
e3:f2:aa:c2:e1:ec:31:2e:14:65:fd:4a:99:5c:75:e6:2a:2f:
ca:61:30:b4:a0:6c:a0:c2:98:70:de:f4:eb:2b:22:7f:eb:e7:
11:4f:b8:73:c1:94:f0:bb:50:34:54:d5:a3:8e:1e:40:75:83:
7d:4d:d9:6b:5a:22:23:03:4a:a5:8c:dd:48:ab:58:23:cc:7a:
51:fd:bf:41:40:64:9a:13:19:d2:51:f3:bc:f8:37:74:89:e5:
79:34:68:ad:c2:bc:40:bd:9d:66:a2:a3:e2:2d:f8:47:db:a4:
e6:a4:35:e5:06:fb:17:5c:8c:ce:d8:b7:55:b4:49:63:dc:32:
08:55:d7:dc:a1:f4:f3:b2:dc:40:d1:14:f6:91:71:9d:58:b1:
1f:6f:3f:7d:80:73:c8:62:cc:95:96:1c:68:2f:f5:4f:8b:ab:
f6:ca:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:49 2025 by rpki-client