Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: HpaQZTCOV2y6X9p4lfVA8DqZq17t8bLUwIykB1rPbvs=
Subject key identifier: B6:1F:DA:7F:15:28:E5:6F:00:C8:55:B5:7D:1C:F5:FB:C0:1F:1B:A4
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 0198D705AD065BE6481A694F17A34FA412D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0E78
Signing time: Sat 23 Aug 2025 13:02:09 +0000
Manifest this update: Sat 23 Aug 2025 13:02:09 +0000
Manifest next update: Sun 24 Aug 2025 13:02:09 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: SnBXW6WwzaX+XCJRrdGedmDJZo0qkshqwyhuIFxLUgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ad:06:5b:e6:48:1a:69:4f:17:a3:4f:a4:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Aug 23 13:02:09 2025 GMT
Not After : Aug 24 13:02:09 2025 GMT
Subject: CN=b61fda7f1528e56f00c855b57d1cf5fbc01f1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:2c:76:2e:6d:47:75:45:4f:71:d1:9d:a9:
62:a1:03:8a:97:f7:a4:6f:e4:60:6a:df:33:65:16:
5b:9f:68:2a:31:80:6e:0c:ff:e5:47:8c:ed:e8:19:
a9:cc:60:e3:1f:8c:71:7b:79:ef:85:86:de:d0:17:
26:c6:8d:55:6b:9e:36:3c:8c:81:df:6e:20:d5:76:
01:e9:57:5b:f7:f7:2e:89:5e:52:58:d9:82:a0:c5:
2e:5c:2c:82:a3:f8:bf:fc:79:9a:38:d2:d6:0f:5f:
56:15:18:11:fd:e2:12:b9:bb:12:b0:c3:5a:f8:d0:
21:46:aa:e3:68:be:17:65:5f:9c:e4:2f:a8:70:79:
63:9b:68:6e:e2:75:b1:fb:cc:8c:fe:b3:11:d5:a3:
66:68:46:76:54:8f:c9:ad:9e:19:40:9e:fc:f7:e9:
9a:cd:58:74:78:45:45:14:c0:18:82:dd:d3:58:06:
9c:48:c4:15:36:70:4e:09:0f:04:60:cf:b4:c8:17:
e1:67:00:72:0b:35:01:fc:1c:5b:c7:bf:61:a7:0d:
5f:68:a9:7e:d8:3e:92:88:da:07:e0:1f:01:4a:ae:
4f:b1:2c:83:1b:82:a7:4b:f3:00:c9:63:a3:5c:de:
7f:c3:b2:8e:c5:38:1d:df:1f:7e:74:ef:5d:7f:e0:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:DA:7F:15:28:E5:6F:00:C8:55:B5:7D:1C:F5:FB:C0:1F:1B:A4
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:88:74:6c:c3:ca:36:ed:19:0c:65:a3:c2:22:be:ea:bc:c8:
3a:5d:a7:c3:fb:c0:b4:22:84:59:25:b3:60:8e:04:ad:50:20:
78:b5:63:a4:c9:4c:61:7a:51:17:29:22:60:79:e3:e3:24:bb:
95:90:86:b1:6a:cd:7d:02:bc:ef:e2:83:ec:13:d4:05:93:b2:
11:14:5a:2b:60:45:69:7a:c9:2a:6f:2a:14:17:9f:f9:80:6e:
47:12:06:83:c1:5c:5c:85:a3:7d:b5:a2:e0:3a:b9:d3:e3:d2:
20:73:44:9d:fe:da:d6:ae:fe:f3:20:9f:02:0e:c8:c6:15:8e:
ec:9b:ba:a8:25:3c:05:ec:ca:f5:93:95:af:64:d6:a0:de:5f:
ae:cb:a4:b1:9b:e4:80:7f:21:90:7c:f3:67:93:4a:fd:06:f0:
26:1d:23:af:e1:62:44:07:e9:c4:86:8b:95:ad:eb:36:21:24:
70:37:74:03:3d:5c:37:94:5a:fc:37:41:04:9a:b8:4a:f9:c3:
03:4b:43:33:f2:50:6d:ad:4f:53:1b:2d:14:16:b1:48:60:b3:
60:fd:97:33:b6:44:1b:e4:6b:3f:54:2a:cd:e8:48:1a:2b:e7:
11:ef:7e:32:21:03:0d:19:85:44:6c:cb:09:88:19:bb:d9:a1:
cc:e8:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:04 2025 by rpki-client