
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: vCU50gDafeus5Gxl+uBgOQDyKccv2HZSrztaQ2NOp5Q=
Subject key identifier: CE:81:34:95:59:9D:B6:51:26:0E:5D:5A:13:9C:BB:11:C1:B3:33:4A
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 01988B460BCAA091DF4BCEFF88D98E00CBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0D04
Signing time: Fri 08 Aug 2025 20:01:20 +0000
Manifest this update: Fri 08 Aug 2025 20:01:20 +0000
Manifest next update: Sat 09 Aug 2025 20:01:20 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: kvsSDTBFUVL9JgO59T8whHrUhWnpaUy/D58bubLYibU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:46:0b:ca:a0:91:df:4b:ce:ff:88:d9:8e:00:cb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Aug 8 20:01:20 2025 GMT
Not After : Aug 9 20:01:20 2025 GMT
Subject: CN=ce813495599db651260e5d5a139cbb11c1b3334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:eb:5e:e9:8c:12:f7:b2:73:e6:13:1f:61:
60:12:95:ea:8a:d0:8f:90:9e:63:82:dd:30:2a:4d:
19:42:1e:c8:9a:86:6f:10:94:63:38:8c:22:fa:b7:
14:78:20:e3:69:e2:67:be:0f:fa:97:ca:cf:fa:df:
8f:05:a0:52:4e:ca:9f:41:7a:9e:a4:8e:32:47:40:
9a:ec:f0:0f:a1:03:cd:a8:46:af:b4:05:5b:30:cb:
9b:cd:73:9d:00:e9:71:0d:33:90:26:2a:08:3b:d9:
43:3a:dd:b7:58:e8:78:9e:d5:3e:bd:7c:d3:7c:be:
e0:e2:a0:8d:21:41:6a:3e:1f:fa:53:5d:a8:bf:fa:
0c:07:73:17:b8:55:f4:1a:0e:ee:f2:ed:c1:bb:ac:
9b:b7:2c:c3:00:3d:9e:ea:80:29:91:36:72:36:50:
da:1b:26:c2:6e:ba:04:a3:1b:e6:2d:13:6c:c3:3b:
0d:3b:da:d9:cd:fe:d1:8f:74:fa:b1:dd:2d:22:c6:
28:98:fe:fa:ad:ee:00:f1:d8:93:ef:50:db:0f:58:
e4:16:a3:e2:05:bf:6f:c3:8c:c9:56:a6:02:01:fa:
73:49:04:16:51:a7:7b:28:d5:94:22:fa:ca:3f:6d:
fb:9a:80:16:db:7e:eb:9c:99:0d:2f:d5:24:f1:15:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:34:95:59:9D:B6:51:26:0E:5D:5A:13:9C:BB:11:C1:B3:33:4A
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:aa:7e:bf:8b:af:4b:9b:b4:fb:a5:74:2f:af:0c:c8:d6:bb:
ba:31:06:b9:21:bb:bf:f0:84:74:b4:cd:01:b1:e8:93:08:0b:
56:3d:ab:58:c0:8a:ed:e2:ce:2c:d4:4f:f0:5c:8b:46:01:95:
14:d6:93:5a:d7:3c:b5:42:40:4b:de:8b:ce:31:e9:75:1d:e7:
e1:a0:85:cd:ef:f8:31:f2:0b:b9:d5:91:cd:ed:42:92:de:3d:
6d:c9:c1:a0:ca:e2:ff:9a:cd:b8:bc:81:6b:ce:ef:72:c1:90:
f6:00:ec:18:cf:f4:fa:6a:a6:9e:ff:71:a8:03:f2:37:71:b3:
29:a1:e8:55:a9:fe:a7:48:5e:ef:da:05:81:5d:c0:2c:91:5f:
ed:03:db:3e:81:04:b2:74:a4:fa:db:79:ad:e8:c8:1c:91:69:
77:81:03:e7:28:67:63:34:0e:0a:1f:fd:db:36:dc:4d:84:85:
1e:88:3a:2e:54:3f:ec:6d:e4:b1:bf:42:f5:bb:f9:8c:63:19:
7e:26:c1:e5:b5:f4:56:7b:35:95:47:1c:ac:c8:cf:a7:a3:ed:
79:7a:71:1f:71:f2:24:93:68:aa:28:9b:ca:4c:6c:34:6c:21:
1b:e5:94:4b:86:9b:84:92:f5:d3:68:37:67:3a:6d:fc:dd:85:
44:41:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:19 2025 by rpki-client