Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: M1m+WpTAjf1PH68S9ju/yez4UgWGoHN7nT8cdIKRSWw=
Subject key identifier: 9B:41:65:FC:2C:33:F6:02:BC:18:DB:13:E2:76:6C:30:A5:4D:7B:EA
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 01987DF7B4A3E6E02A6BDF311859E5DDD6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 06:00:42 +0000
Manifest this update: Wed 06 Aug 2025 06:00:42 +0000
Manifest next update: Thu 07 Aug 2025 06:00:42 +0000
Files and hashes: 1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: 40edQSlF1G6oNbwLClECIqUPGsqRPB5e2sywCnuIGkc=)
2: OPRG5qVik0clg7wkwnl7SUN9jY0.roa (hash: ZN4J6ol4OC/X57nz18jc3tVUWSo2XvbIumwEP6WKJXU=)
3: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:b4:a3:e6:e0:2a:6b:df:31:18:59:e5:dd:d6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Aug 6 06:00:42 2025 GMT
Not After : Aug 7 06:00:42 2025 GMT
Subject: CN=9b4165fc2c33f602bc18db13e2766c30a54d7bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ea:d3:90:50:eb:c5:35:1a:f3:8d:be:62:0a:
13:7a:fc:44:da:8d:7d:ab:6d:22:5a:01:b9:84:eb:
64:cd:f7:ba:d7:42:56:65:78:a6:78:2c:46:10:12:
40:a1:15:54:a3:c0:8f:39:e6:01:c2:90:19:f7:60:
6a:3d:42:c0:c8:ca:5a:74:07:7f:c8:18:3d:80:13:
34:f3:4f:d5:2a:7e:4e:3d:e2:83:9e:83:58:d1:2f:
74:ce:eb:c4:ef:11:95:9d:71:7c:5d:43:5f:64:33:
f2:57:a8:22:09:98:64:e0:e2:ef:f2:f7:59:41:13:
21:b0:8c:16:82:24:f4:37:62:4a:62:90:0f:de:1c:
49:8b:6c:e4:cc:8b:8b:5a:db:2c:75:a9:ca:2b:56:
b0:77:86:e8:ec:62:bc:b9:f7:f5:7f:f1:8b:e9:7a:
6a:13:17:7c:dd:64:42:4d:c6:03:5f:52:df:5b:42:
aa:3f:d1:62:89:f1:42:bc:3f:7e:a3:d3:c2:b8:1d:
c0:79:96:8e:b4:20:7d:94:2b:e3:69:7d:40:46:91:
52:d4:77:a3:07:fb:17:30:c0:28:6d:ba:16:24:fb:
18:c6:6a:b2:24:ae:7b:d7:f0:9f:ec:07:8c:31:e4:
35:70:d0:b1:73:13:42:1f:d9:6a:c5:df:50:bd:98:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:65:FC:2C:33:F6:02:BC:18:DB:13:E2:76:6C:30:A5:4D:7B:EA
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:9f:7d:3e:e9:65:4d:6b:66:57:18:bc:ea:96:15:f6:17:
bb:c6:f4:8d:7e:68:85:71:87:d1:59:16:d5:26:fb:0b:2b:5a:
59:74:a4:d7:ce:2e:d5:86:37:1e:22:8f:43:de:37:94:2d:d3:
3a:a7:11:58:f8:78:b4:bd:85:bf:ce:f0:73:72:b2:11:53:16:
0b:6d:e2:18:7a:4c:d6:56:8b:13:cd:8f:1b:8c:af:41:61:14:
d3:3c:cc:56:dc:af:06:96:ea:a4:a4:62:8f:e6:5a:b8:43:aa:
23:f3:54:22:64:ef:7f:40:c0:b9:90:26:7d:c9:e0:71:a6:ad:
8a:e9:2a:d4:e7:88:3c:83:4f:82:b3:78:7d:93:4e:e1:89:32:
1e:ce:fb:af:b7:83:57:d0:2c:d8:5d:0f:28:eb:40:80:ce:79:
27:79:42:43:e9:17:5c:dd:a2:4f:9d:4a:1b:9f:18:15:4a:a0:
36:73:83:37:d4:ce:11:64:f1:ee:a7:b4:b3:a7:22:1c:b7:05:
90:a3:95:9d:eb:ad:76:c9:69:e7:e8:68:8f:0f:91:36:7d:20:
92:9f:95:ed:75:69:82:58:64:32:8c:f8:82:25:7b:35:70:3f:
c2:9b:7f:4a:f5:dd:d6:b5:ad:52:f0:d9:7f:e2:b3:49:53:4e:
24:33:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:17 2025 by rpki-client