
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: EoyUM+vig0TS9coCrkFnyXk675K/D2DfLVwNOsEhyTI=
Subject key identifier: 01:07:9E:BB:1B:28:F2:7C:63:93:32:47:12:0D:5F:55:60:7E:DD:83
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 0198744FB350309D615DA64BE26F7CDBB1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:00:36 +0000
Manifest this update: Mon 04 Aug 2025 09:00:36 +0000
Manifest next update: Tue 05 Aug 2025 09:00:36 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: Pw8kNLygXx6fUKG26w/45l0b15TDOWcCAeV6pSHJZ8E=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b3:50:30:9d:61:5d:a6:4b:e2:6f:7c:db:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Aug 4 09:00:36 2025 GMT
Not After : Aug 5 09:00:36 2025 GMT
Subject: CN=01079ebb1b28f27c63933247120d5f55607edd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:bc:ac:2c:ec:86:26:f3:b6:58:fe:9a:96:
44:f5:02:dd:32:ff:b5:1a:07:33:ef:6f:ac:23:36:
08:05:96:5b:77:89:8d:46:2e:c9:de:34:24:af:5a:
93:11:04:5c:6c:b0:bf:a6:32:6e:c2:d8:6e:09:a4:
04:d0:88:15:45:6e:5d:52:83:21:78:97:e5:59:63:
f8:76:1c:c1:7a:0b:cd:39:1b:c4:f2:22:f4:b2:51:
b0:f0:08:5a:99:e8:b2:ad:eb:20:d7:05:2e:f2:99:
9b:97:bc:b8:60:65:13:7b:7b:6a:63:dc:21:37:96:
38:e5:36:cd:c0:32:73:84:0b:e8:4d:af:a4:51:9c:
3e:2f:ac:45:f2:17:e4:e8:8e:cb:1f:18:41:58:df:
cd:36:c3:4a:88:fd:a5:eb:3b:c7:a0:87:6a:8a:b7:
23:c9:2e:46:73:1c:d7:1f:05:71:64:bb:61:fc:c0:
39:a0:b8:d9:c4:dc:7b:53:d8:d5:c9:b5:3c:30:15:
24:b5:eb:1a:9e:22:e3:3f:69:17:c7:29:8e:8c:de:
00:19:82:1a:ed:7b:0e:92:83:f5:94:05:43:25:76:
0f:c9:cd:80:12:6d:3f:a0:71:1e:e8:25:9f:c6:9f:
18:5e:70:38:c5:2a:e9:ee:17:e6:58:d5:cd:3d:21:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:9E:BB:1B:28:F2:7C:63:93:32:47:12:0D:5F:55:60:7E:DD:83
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4b:0f:9f:ec:ac:44:a1:d4:71:05:af:74:06:c5:c6:25:4b:
f9:a2:bf:ee:b3:3c:f6:a0:69:cb:7f:6c:58:30:61:c8:24:c7:
0d:1b:69:34:e9:05:92:88:49:e0:50:03:2d:25:5c:fc:79:bd:
0b:9f:65:2e:7b:4f:9d:e7:0d:07:ab:a0:b5:72:9b:b9:5e:b0:
d6:c5:9c:d4:5a:e2:1f:fc:98:c6:0c:12:f7:71:00:b0:7a:4e:
71:16:17:71:3c:01:40:ac:e7:d7:4e:e2:59:15:6b:5d:db:1b:
41:0d:0e:9d:fd:ce:a5:f5:5d:87:0c:4a:ba:52:ab:c2:65:87:
fa:65:2b:ba:88:40:c7:19:e2:b9:af:d3:7e:d3:5b:0e:3b:f4:
ef:92:69:ec:53:3b:10:dc:5b:04:7c:ec:69:f4:6c:75:73:0f:
7d:ec:b9:ff:6a:02:36:2f:85:a8:50:51:49:80:0a:d9:9c:5e:
db:b8:31:08:d2:e8:10:a2:ae:33:9d:9d:33:94:63:94:e2:31:
9a:55:4c:ce:96:ea:73:bd:0d:62:85:aa:84:a1:65:68:90:e0:
62:0e:7f:96:9c:1a:eb:30:1a:fe:42:92:e3:0b:f9:be:74:32:
26:e1:37:09:3c:c8:e6:94:d8:ed:a0:54:38:70:49:02:a7:3f:
b2:b5:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:35 2025 by rpki-client