Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: td61Pk5zKxB3c/Uv1BmffxfvmMnNTB/+evptwvy8Xlk=
Subject key identifier: 40:BA:07:45:72:F0:47:82:17:65:5A:71:28:35:03:20:75:33:E6:14
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 0198D54E30EEDDFBB5E9D2EE263116D6D12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:02:07 +0000
Manifest this update: Sat 23 Aug 2025 05:02:07 +0000
Manifest next update: Sun 24 Aug 2025 05:02:07 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: ceU2xvc3+g6f9L24K9WylBmKI30Q08bJkBA5+GOlmWc=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:30:ee:dd:fb:b5:e9:d2:ee:26:31:16:d6:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Aug 23 05:02:07 2025 GMT
Not After : Aug 24 05:02:07 2025 GMT
Subject: CN=40ba074572f0478217655a71283503207533e614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:37:a9:e5:94:a1:77:0c:55:9d:9f:54:5b:
02:f9:0c:ef:36:1d:66:8e:f4:ba:26:fb:de:d2:85:
e4:d2:d3:e2:ed:76:20:7b:29:d8:96:ce:29:f8:0c:
94:15:1e:a2:9a:53:0c:cd:4c:ba:b7:af:2b:79:9f:
32:6a:a0:b8:aa:c5:25:a3:a4:a0:75:d1:28:8d:47:
1d:9e:c3:25:c4:e5:b0:c3:ab:90:92:4b:bb:ed:0e:
49:3c:ba:51:cf:4b:aa:b9:e0:7e:7d:36:16:8a:6a:
54:e8:24:31:5b:2f:68:10:95:b9:5b:9c:23:a5:cf:
c5:64:5c:a9:03:4a:e8:21:98:f0:f3:75:5e:ed:5c:
9f:0a:2c:63:13:9d:88:86:b4:c8:47:29:0d:bc:f1:
ec:49:01:8b:ba:7e:50:37:7d:0a:22:06:03:24:3c:
7f:96:0b:dd:6d:bf:b0:89:f1:ce:d4:66:e3:e5:9a:
d3:b3:71:8b:b2:cd:c2:54:2f:92:ce:2d:ea:90:85:
e2:c6:ce:e8:ba:73:9a:57:00:22:8b:e2:44:ba:4f:
62:68:10:28:23:02:c1:33:95:ec:ac:32:a3:ae:cb:
22:61:48:13:44:97:64:84:2f:98:e8:ad:56:06:e8:
04:ec:62:8c:f4:41:1a:8c:28:fb:05:ad:f0:0d:c2:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BA:07:45:72:F0:47:82:17:65:5A:71:28:35:03:20:75:33:E6:14
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:8a:c4:a2:dc:15:dd:c0:df:b1:5a:be:e1:a1:a1:54:3d:
b8:df:46:97:d1:b9:f6:ac:aa:4a:34:c2:44:75:73:1f:86:24:
ef:43:00:e4:4b:0d:f5:78:2c:ea:cf:ea:18:8c:3f:58:26:22:
87:a5:ce:06:f1:8e:40:1c:79:b2:84:01:60:e4:87:40:22:38:
29:a7:f7:28:ca:54:ca:fd:a0:bf:e1:a1:76:58:a4:f3:30:3f:
65:71:51:35:33:16:df:24:3d:52:ff:b2:66:98:32:46:3d:a1:
23:7f:3e:99:ef:c6:7d:90:2e:ae:ef:09:a6:85:a2:7d:5a:ee:
c0:5e:1c:b7:a3:45:83:24:5f:9e:f9:61:f0:ab:e0:3f:4f:f8:
c9:1c:bd:72:8b:8f:42:3c:26:88:1d:81:65:1e:09:a1:69:6b:
e5:78:be:d7:2f:49:f6:53:30:3d:ab:ef:bb:21:c0:1f:fa:97:
f4:26:17:e3:c3:d8:2b:fe:8a:60:5c:ed:df:7e:2c:f1:b9:86:
97:be:d1:6a:fe:07:77:86:24:4c:5c:92:27:55:ae:71:c6:fb:
8a:30:87:5f:bf:db:67:b5:1b:6b:ad:9a:52:3e:06:f1:4d:cb:
df:1e:08:d6:8b:ac:68:da:8e:d4:7a:85:bd:8f:f2:32:fb:aa:
c7:bd:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:18 2025 by rpki-client