
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: ZIC7nB2nAgkPDum0cmwKM49t7mmJUel7OC3k9ddOfNI=
Subject key identifier: F2:0C:E0:35:9A:1D:85:DF:29:80:26:E3:F2:91:85:79:D7:27:75:B8
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019875628EF506DD74FB6AB86F5E221948F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 14FA
Signing time: Mon 04 Aug 2025 14:00:49 +0000
Manifest this update: Mon 04 Aug 2025 14:00:49 +0000
Manifest next update: Tue 05 Aug 2025 14:00:49 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: HKJn77O7p3ePs+nDHkL3sCQW4y45ptVqxIwJ5JWKHOM=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:8e:f5:06:dd:74:fb:6a:b8:6f:5e:22:19:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Aug 4 14:00:49 2025 GMT
Not After : Aug 5 14:00:49 2025 GMT
Subject: CN=f20ce0359a1d85df298026e3f2918579d72775b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:b0:cb:0e:64:cf:a5:81:35:33:e9:8e:cf:
85:69:4f:d1:59:ec:7f:05:35:96:2c:b3:7d:64:0e:
59:35:dd:f9:d3:c9:f2:88:01:b8:36:69:4c:5a:39:
fe:b7:63:1b:ea:72:9e:5d:b1:2e:69:86:be:7c:b9:
cc:f4:b0:32:09:d7:69:aa:b7:4d:00:b3:32:4a:e6:
7d:88:15:fc:06:21:b0:51:04:48:99:cc:a1:91:c4:
26:e5:d6:bb:c1:ab:1a:e1:72:73:7c:f1:f6:96:ae:
0f:01:a4:e5:79:6c:4b:28:bf:a9:60:cf:f7:57:4e:
e5:9a:df:5b:15:36:90:72:77:da:8f:1b:b1:42:5e:
f6:66:2d:6b:a0:a7:ed:d4:e9:f3:94:bd:b4:ff:42:
bd:d2:00:6d:5a:a4:aa:75:0e:d4:b7:87:21:aa:1f:
6e:20:a3:77:56:1d:22:ab:07:45:bd:c5:07:c1:d2:
c3:12:5f:7c:42:f0:e7:c8:f4:a1:ac:64:da:cd:7e:
ef:5e:8e:71:60:77:7d:e4:51:f2:a1:f0:e7:34:24:
a9:1d:6d:f1:26:6d:a1:04:cd:6e:27:0d:63:ce:fe:
f7:27:cc:8a:5e:54:9c:77:b3:f4:d5:d6:29:e3:41:
39:2a:27:6c:a3:5d:35:55:5a:39:f3:1a:eb:18:af:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:E0:35:9A:1D:85:DF:29:80:26:E3:F2:91:85:79:D7:27:75:B8
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:27:d1:37:95:3b:e6:a3:0f:36:d4:58:c0:80:97:7a:c3:ef:
a7:f1:39:d8:6b:1c:64:c1:cf:1e:c2:ce:20:3f:be:12:96:a4:
7f:07:b7:6e:21:ea:8b:9d:27:6d:c4:f9:cf:a3:85:c1:63:12:
dd:ae:f2:a2:f5:73:fa:a1:c5:34:c5:05:e0:17:ae:3e:1b:ba:
3a:e2:e3:28:a8:00:dc:9a:c7:6c:62:a3:88:8f:9a:2b:a5:7e:
44:06:9a:1d:3b:a6:b3:59:b2:3c:4b:ba:63:c6:50:4d:c2:01:
87:6a:94:01:b4:8d:ec:ca:82:8e:29:0e:25:63:c9:59:17:ab:
b5:7a:22:e4:84:61:ea:cf:1d:63:17:a6:42:9c:24:7c:f1:20:
bc:4c:80:5e:1e:b4:ab:be:d0:71:b8:a6:8d:05:20:88:94:68:
67:c6:e2:7f:fc:99:a0:c3:df:f4:ae:c2:65:ed:3e:64:74:71:
1c:60:36:51:f7:1c:e8:a3:9c:2d:34:9b:2f:7a:6d:3e:e6:ac:
ea:76:8d:d3:81:93:fb:df:dc:02:9c:06:28:34:c3:84:2c:0f:
57:e4:af:d1:c2:86:58:19:05:36:49:5d:ec:5e:95:85:ae:7a:
6b:e6:e2:0f:90:ff:68:e7:da:19:f3:6b:a3:e6:40:a5:a9:11:
61:e8:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:14:19 2025 by rpki-client