Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: k3JxbMJPlaMGxsdTwNjlGQFBoapGV0dUmZ2acnBBj38=
Subject key identifier: 40:98:8B:B9:02:E5:88:15:93:3A:C8:F9:29:B2:73:4D:66:13:41:39
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019882B0B380B53020AE92B6F3A609FE1052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 0FFA
Signing time: Thu 07 Aug 2025 04:01:14 +0000
Manifest this update: Thu 07 Aug 2025 04:01:14 +0000
Manifest next update: Fri 08 Aug 2025 04:01:14 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: ETJktJdPHJrvU17QS2wW+d8jAlAcMPajYs/kLFmzIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:b3:80:b5:30:20:ae:92:b6:f3:a6:09:fe:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Aug 7 04:01:14 2025 GMT
Not After : Aug 8 04:01:14 2025 GMT
Subject: CN=40988bb902e58815933ac8f929b2734d66134139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:67:a4:5e:fb:7f:3f:7c:cb:dc:e8:ee:e2:
54:92:15:d5:97:1e:69:b3:4d:90:ad:c2:9a:6a:87:
7e:66:7e:6e:a7:02:df:6b:54:36:a3:c9:77:b1:fd:
77:51:c2:62:2c:0b:33:4f:dc:38:ea:de:b3:95:c7:
01:dc:58:46:55:8d:ae:66:65:1a:5e:74:b5:c2:49:
8b:0c:79:28:2f:71:9b:cb:9e:1c:a0:b6:ac:1b:7d:
34:e8:92:cb:e0:7d:ff:02:ad:32:c9:b9:9d:9f:f1:
3a:95:8c:5c:49:bd:74:06:a3:c7:c8:50:b0:8f:09:
f5:9e:e8:c4:15:e6:de:df:99:c7:26:62:1b:06:a8:
69:e9:8c:00:0e:db:78:d8:fd:82:95:ae:f7:51:22:
1d:2f:97:88:7e:1c:53:17:33:d7:59:a7:aa:06:17:
c8:f1:8b:7c:c5:a1:ed:94:66:11:16:b9:3f:6f:b8:
c1:85:48:56:d8:99:6b:b4:47:c6:de:a8:8d:69:1e:
9a:66:78:e8:e2:0e:80:9d:62:e1:3a:9f:26:85:20:
35:8d:ce:50:b8:46:11:26:a4:ae:67:c5:f5:e3:23:
64:db:ab:53:05:4a:0b:34:50:e6:b7:58:01:79:d6:
09:ad:03:13:6b:6d:c5:c3:e8:a8:f1:cc:45:7e:22:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:8B:B9:02:E5:88:15:93:3A:C8:F9:29:B2:73:4D:66:13:41:39
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b8:e2:51:a6:43:8b:f8:78:45:ea:f5:58:51:a4:14:16:9c:
c8:87:09:d1:40:ba:e5:a2:5d:c2:26:3c:91:a2:cf:3d:d3:f6:
8e:28:bd:35:9a:8c:bb:48:40:d5:50:53:1f:69:ad:64:28:96:
9b:e0:6e:aa:cf:9f:3c:2d:a4:31:b1:0a:d9:97:a8:30:51:3c:
99:89:66:82:41:2a:b1:40:36:62:40:0a:a0:c6:0e:86:dc:f2:
2d:f3:0b:bb:9c:c5:55:d6:31:b3:bf:e3:d7:be:cd:b9:97:43:
2e:7d:de:31:e8:4f:63:9d:68:d0:5e:0b:4e:15:1c:7d:5f:e1:
46:5a:bd:9b:ca:f0:dd:72:60:dc:f1:1b:f7:26:3a:00:1f:7b:
59:63:41:9c:00:fe:ec:6e:dd:a9:04:24:65:9c:54:8a:65:b0:
ce:74:e3:c1:e5:a8:46:ee:72:95:b7:5d:1b:de:38:69:a6:50:
ea:14:39:c2:80:f5:81:1d:07:eb:06:86:4d:ac:0c:b7:4e:8c:
fa:c7:3e:d3:40:b9:a5:87:2b:6e:5c:c3:79:fa:d5:11:b6:b9:
03:e0:d8:6d:c3:92:17:5a:c3:a1:0b:5a:0f:bb:02:ab:26:3e:
65:98:0d:cb:5e:ea:c5:37:5e:38:c3:35:61:2d:54:19:d8:01:
ab:89:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:56:16 2025 by rpki-client