Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: efQ33DqTksgIO9Q4fUkdr1YOQTV8n7SDO37xCSceex0=
Subject key identifier: AB:4D:DF:08:69:56:14:A4:45:8E:41:3F:2C:40:67:7D:E9:30:51:C1
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 01987C09D7B3CFC45A204A3877E4D13A3034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1623
Signing time: Tue 05 Aug 2025 21:01:16 +0000
Manifest this update: Tue 05 Aug 2025 21:01:16 +0000
Manifest next update: Wed 06 Aug 2025 21:01:16 +0000
Files and hashes: 1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: Y6jbE/yeG40Lun7exzMgXfZ+Aq0mGFxQDMRNqulhFcM=)
3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:d7:b3:cf:c4:5a:20:4a:38:77:e4:d1:3a:30:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Aug 5 21:01:16 2025 GMT
Not After : Aug 6 21:01:16 2025 GMT
Subject: CN=ab4ddf08695614a4458e413f2c40677de93051c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:21:34:f3:18:0c:f8:b7:a9:bf:b6:17:0d:
55:44:61:f9:cb:48:14:cf:6d:cd:b1:53:b7:17:af:
21:30:d1:40:df:92:ca:89:26:cd:b5:5a:ae:d5:3d:
35:78:28:d5:a3:8d:ac:82:a7:7a:d5:81:2e:6b:71:
0c:7b:3e:69:91:7b:98:2c:bb:41:a0:f7:70:b3:e8:
01:bd:ab:37:ef:8a:84:bc:22:30:7d:15:12:64:bc:
0e:66:40:f3:19:ac:47:f9:41:f7:9f:9c:37:9e:4c:
c1:f4:a6:b2:ec:d3:be:a7:75:0a:ad:db:1d:9e:6e:
e4:fe:2a:33:29:b1:33:58:ef:89:56:85:93:e9:ac:
5b:f5:0b:dc:24:2d:4b:b7:78:d0:7b:c3:ec:cc:ce:
89:87:d7:d1:71:76:6c:25:81:bb:95:cf:9a:eb:56:
6a:a0:74:36:75:2d:1b:6e:36:d2:cd:c7:11:64:13:
af:8a:73:f6:56:ee:ee:25:53:32:46:bb:1b:45:ac:
dd:33:8a:28:c8:48:35:3b:e3:33:cc:02:a5:84:f9:
ee:25:4d:be:c2:32:a3:bd:9b:bf:21:48:5e:19:c8:
23:a5:d2:cb:f2:13:55:c2:e3:44:4e:7b:71:7f:7f:
59:d8:02:9b:44:8b:9b:d9:c0:c0:a3:ae:e2:aa:c2:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:DF:08:69:56:14:A4:45:8E:41:3F:2C:40:67:7D:E9:30:51:C1
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:95:08:83:a0:b6:42:fd:a8:76:59:5d:51:eb:b3:ec:b3:37:
ac:0d:2a:03:21:03:85:0b:7a:4a:6d:a6:6e:09:61:51:40:8b:
72:dd:ae:d6:83:0f:71:63:0a:8e:62:42:df:c2:58:a3:09:04:
8c:12:ba:9c:b4:95:3b:f1:ba:ff:9c:44:a8:86:50:ee:51:5d:
94:61:20:65:bd:c1:9d:07:fb:2c:17:60:4b:51:84:27:86:3e:
3c:1b:57:e1:b2:90:16:5b:ae:f9:a5:0e:90:0c:fd:b6:04:0d:
b8:9a:1f:6d:a3:8a:fe:e9:6e:86:24:40:42:40:19:77:ba:52:
60:ef:44:59:68:c2:df:fc:12:82:04:e2:b9:a6:e8:1e:2f:61:
6a:22:6c:1b:83:b6:d4:3e:79:b9:c8:7f:ce:eb:1b:6d:c0:47:
69:f4:ac:9f:a9:1c:7b:38:3c:05:2c:aa:cf:85:19:84:ab:d7:
d0:55:b2:e8:59:c1:c2:ed:ba:6c:14:15:52:09:de:08:69:46:
5f:73:5b:3d:b9:c1:d0:2d:78:66:5a:3f:87:1f:c3:26:63:25:
8a:33:93:c3:f2:ce:9c:12:0d:70:7e:af:65:6a:c9:2f:55:41:
e4:8b:54:09:bf:77:b9:e5:43:ab:ef:2b:98:d4:46:ea:93:c8:
9f:bc:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:59:00 2025 by rpki-client