Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: ZDTOfhdbhUwKuayPmss4BiuaWNA9sWqVRdH6eztw8bc=
Subject key identifier: 7E:EE:F4:22:D1:1E:6E:AD:92:78:92:83:B3:D9:8B:3A:64:25:D0:BB
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0198D5F15F0813F10CDBFCF3DD6DBC445076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0F40
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 1Wwm2ioYvPYsghqXwy9GFjT9Ke3g+UizSctvpFF4oIw=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5f:08:13:f1:0c:db:fc:f3:dd:6d:bc:44:50:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=7eeef422d11e6ead92789283b3d98b3a6425d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:0b:10:33:c0:2e:11:f1:1b:d5:66:0a:eb:
87:fd:26:1b:82:63:d8:f7:0a:a3:60:d1:da:da:01:
c0:f1:aa:4e:03:9a:ce:6a:84:91:9d:a6:1f:b2:20:
3d:1f:b1:3d:1c:71:74:be:e3:11:a4:07:3d:03:d5:
57:a5:a6:e3:c5:d7:e5:6c:84:18:c0:af:cc:12:ec:
ef:8d:a0:2c:fa:5d:6b:ea:75:35:74:71:b0:65:99:
2e:27:1f:1a:c8:8a:85:c1:22:f1:ae:e7:79:eb:5f:
fe:aa:df:03:65:eb:0c:40:cf:76:e3:de:3c:01:96:
4a:94:b8:0c:1b:c3:30:70:c9:75:73:eb:05:ef:78:
07:55:55:16:61:93:15:39:4d:40:da:4d:c8:75:50:
91:5f:33:82:d5:65:82:60:29:30:b2:eb:d9:82:53:
7c:9b:c8:48:e5:a5:99:f0:8e:07:7f:e9:ca:94:7c:
69:a5:a0:fe:5d:f6:7e:dc:e8:82:fd:24:d2:09:2e:
20:f5:b3:0a:46:22:fc:d8:32:ed:72:6c:96:f0:bc:
0d:75:b3:d6:83:0b:14:87:00:4f:1e:b7:f8:83:f4:
22:da:29:a7:d0:d0:d7:cd:c1:8d:b7:f4:43:0d:df:
2f:7f:f3:98:04:a7:db:38:cb:32:eb:0a:e5:a9:4e:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:F4:22:D1:1E:6E:AD:92:78:92:83:B3:D9:8B:3A:64:25:D0:BB
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:6c:df:8e:c9:f3:8a:90:02:6e:dd:bf:fd:8e:2f:b6:9e:
f5:1d:3d:42:8a:92:62:b8:c5:2a:37:ce:4e:a4:2b:bf:72:85:
21:87:aa:c7:14:cc:12:fd:c8:e8:75:7a:3e:35:45:c7:06:c3:
73:d6:07:83:17:cd:c8:78:e0:6b:27:b7:5a:63:60:50:e3:3d:
d2:70:5e:50:e5:83:c5:ad:9e:ce:d1:ef:47:ac:22:a6:68:60:
6a:05:47:93:ab:c7:d6:e8:18:76:65:5b:9b:ec:f4:71:7d:58:
e7:80:7b:e0:b7:5f:65:c6:fc:41:20:78:d8:05:f2:9e:dd:7e:
43:e2:7e:fa:02:86:b9:b2:19:28:c1:00:3c:28:47:71:b9:c3:
45:30:24:02:f5:1d:d0:ba:b5:40:a0:a9:01:27:35:c6:47:4d:
e6:1b:54:49:c0:61:27:e2:84:59:d3:0b:49:ef:4c:99:c1:a0:
d5:e0:a3:77:e3:92:5d:41:d9:b7:7f:fb:4e:2f:e8:36:4d:e3:
6b:44:b9:36:1a:84:e2:a2:7b:27:76:00:dd:41:03:7b:1b:33:
cf:f4:eb:c5:40:e6:b4:8b:3a:8b:73:5f:3e:ee:2b:63:36:ab:
e7:65:07:7e:9c:10:17:e4:b1:33:b2:99:1d:0b:5b:51:2d:4c:
5a:84:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:25 2025 by rpki-client