Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: KZhf/SP2taED+uVMIbqyxvd+agyELqpvArw7+R4be9A=
Subject key identifier: 60:54:81:BB:04:7F:40:7C:06:1B:CA:1E:AC:95:44:10:94:08:92:44
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 0198820B63DA093E236D89C2AC68F0BBE911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 52
Signing time: Thu 07 Aug 2025 01:00:41 +0000
Manifest this update: Thu 07 Aug 2025 01:00:41 +0000
Manifest next update: Fri 08 Aug 2025 01:00:41 +0000
Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: 550OupZSDuzJQ1yj5jVcO7+71WW800H3YLPJZYV0sO0=)
3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:63:da:09:3e:23:6d:89:c2:ac:68:f0:bb:e9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Aug 7 01:00:41 2025 GMT
Not After : Aug 8 01:00:41 2025 GMT
Subject: CN=605481bb047f407c061bca1eac95441094089244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:4c:eb:d1:27:69:e2:28:1d:e4:44:c5:16:
57:d6:e5:8f:48:28:41:08:e1:ba:ae:c5:cb:85:1c:
5c:d4:88:c0:fb:29:f7:be:f9:ad:72:d8:06:96:32:
fc:6b:b6:cf:34:79:de:8d:99:0d:ad:83:bb:0e:e5:
56:65:8e:1e:c4:6f:2f:81:12:fe:b2:6d:99:15:2e:
82:bf:58:f5:ef:63:c7:c6:3e:59:dc:0a:20:86:d1:
28:81:6e:0b:c4:59:c3:df:6a:f3:51:06:fd:19:44:
b3:2c:3a:d9:b1:a0:0c:07:5d:80:1f:a1:aa:0e:b9:
0a:61:09:53:13:23:ed:0f:47:1b:de:d2:e1:d5:02:
8c:10:00:18:83:0b:fd:f4:32:0a:37:e4:af:93:ea:
33:a8:6f:0d:19:86:5c:23:f5:36:c5:d9:88:e3:7f:
a3:50:ff:e4:d8:eb:4d:9d:3e:11:9f:ed:60:07:ae:
2c:d9:04:52:a5:23:37:ad:31:f0:de:b6:a5:6e:5f:
75:c9:d0:50:fe:2b:6f:ae:16:91:c5:04:91:7a:bf:
b3:80:91:d8:b3:48:88:0a:cf:d8:a9:d6:58:51:b8:
26:4f:af:51:07:b8:27:7d:b4:93:e5:19:b2:db:ab:
a1:e4:0a:70:9d:87:09:60:7e:ec:1f:5e:25:25:fc:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:81:BB:04:7F:40:7C:06:1B:CA:1E:AC:95:44:10:94:08:92:44
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:0f:b5:7c:cc:b5:64:84:69:a7:6c:3b:a7:63:71:e5:20:
6f:86:01:91:83:e2:cf:05:59:ae:9b:dc:2e:ab:d6:bf:42:7b:
0f:0e:e0:f0:a1:43:46:f0:6e:a3:c0:df:f2:7b:5b:73:2f:a0:
d2:44:b5:5f:96:ba:02:67:f0:e8:a3:9c:c8:12:1b:72:d7:ff:
51:ea:38:20:b4:83:7c:47:80:b6:42:47:14:90:c8:90:be:77:
f3:90:41:c9:72:73:38:b6:c2:6e:97:e3:ea:1e:e4:6d:ed:3d:
0f:94:7b:a9:ef:d9:41:3d:a5:5b:50:14:54:9d:27:5c:e8:03:
c0:20:42:6d:6d:72:da:b0:69:2e:b6:ec:78:3e:55:47:10:40:
c6:38:7a:44:f0:d6:6c:84:07:85:64:2d:90:10:cb:44:19:41:
2e:b9:49:9f:5e:c8:78:37:89:22:4f:f6:27:ad:77:98:f5:e3:
26:f7:14:cf:b6:36:15:84:2b:cc:8a:55:9e:e8:1f:ab:2c:03:
59:c1:75:50:b9:a7:0c:a6:19:41:aa:5b:e5:1e:cd:54:1c:89:
20:4c:b2:bb:18:02:a5:27:b9:eb:98:6e:a7:e3:4f:16:1b:e3:
35:f3:16:72:7c:03:2e:5e:7f:fc:67:15:1b:3a:c1:42:87:42:
fd:e0:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:02 2025 by rpki-client