Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: 5+v6PvzRfF4SBhl2035N575rTuxdeJtf2i1/fZXV9Qg=
Subject key identifier: 0D:B0:B8:D8:C2:31:B2:0C:33:B9:80:A6:E5:69:25:6D:56:F1:5C:38
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 0198D661149A1860A95C1437F65A420E2427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:23 +0000
Manifest this update: Sat 23 Aug 2025 10:02:23 +0000
Manifest next update: Sun 24 Aug 2025 10:02:23 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: haWDnSbp3Q0RsWJOC4xpNKwPHGURenVmNa3zBk4g+Pw=)
2: VGpF_n1XPkcrX19VIZfEe9zTBfU.roa (hash: ZCWW25MvdyoXZn5hf+wK4mNxI/epLix5Iz9z1Fs5NMw=)
3: o8N6mibH7HzRPfXSA-XguojRJmE.roa (hash: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:14:9a:18:60:a9:5c:14:37:f6:5a:42:0e:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Aug 23 10:02:23 2025 GMT
Not After : Aug 24 10:02:23 2025 GMT
Subject: CN=0db0b8d8c231b20c33b980a6e569256d56f15c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:a6:4f:ab:0a:e7:d2:77:83:b1:95:48:6c:
81:8c:db:e4:be:61:a4:28:27:65:cf:11:bc:0d:c9:
61:4b:32:4f:95:65:c9:d5:01:1d:57:6f:7d:f5:f2:
34:3f:63:16:11:2b:5b:4a:75:57:fc:15:84:ea:85:
a0:dc:cb:40:c4:ae:44:33:c8:d2:1b:cd:b5:16:96:
a4:83:e7:d4:1a:96:a4:c9:e8:be:39:12:70:b7:51:
f8:c5:d3:be:ec:53:6e:44:8f:51:ce:34:d9:02:7a:
f5:67:3a:74:36:fa:2d:94:bc:7d:62:c2:e6:a5:c1:
61:c0:e1:ef:34:e5:1c:ee:72:ce:92:45:a4:94:de:
51:9f:fe:5a:d8:1f:0e:b4:50:db:80:bd:27:73:fb:
d0:90:47:bc:b6:da:8b:dd:ff:ae:15:c6:70:c7:ab:
53:f5:b3:9f:4b:86:31:07:6e:cd:6d:80:cb:75:2e:
0d:c8:c0:1b:d0:13:03:ae:53:f7:e0:14:07:a7:d4:
8b:c0:e3:47:d7:c4:a6:b4:76:cb:11:a0:aa:f6:9b:
f8:0a:ed:8b:49:69:29:90:b6:e2:74:34:42:19:82:
a7:da:12:11:d7:96:3f:ae:95:46:43:93:65:23:d8:
d2:f0:d3:71:c6:4f:bc:8d:27:bd:e6:d9:49:74:f1:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:B8:D8:C2:31:B2:0C:33:B9:80:A6:E5:69:25:6D:56:F1:5C:38
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:46:a4:ef:ea:78:04:c6:bb:25:58:e5:d1:31:ed:28:1a:c9:
42:ab:e9:f0:3f:05:a8:aa:ff:2d:84:6a:b9:40:c9:7d:9f:f9:
ba:48:fd:d5:de:6e:96:58:51:4e:c2:1f:2b:71:a4:98:8c:d9:
60:02:a3:bb:28:87:05:e4:ec:ae:aa:8b:12:40:8c:6b:9e:33:
09:6e:cc:61:ce:d8:94:74:03:64:08:00:c3:99:f1:2c:7c:97:
21:c5:04:d1:8e:fb:a5:6c:07:5f:36:c9:0f:86:7b:1f:5a:be:
af:2e:99:7a:41:0e:16:ed:81:96:49:53:5c:a7:de:fe:5c:0a:
fd:c0:dd:80:37:50:00:66:e2:08:ac:52:86:db:58:41:47:e4:
9b:21:d7:2a:29:28:8a:a5:63:78:a4:97:12:35:d3:35:5f:ae:
5d:97:9b:2e:ad:da:d2:92:6a:fc:45:3f:af:bb:c7:ef:ae:a5:
34:81:c4:d4:98:1f:41:fa:cb:e1:0a:44:5e:00:15:b8:29:e4:
e2:b1:bd:47:2f:ed:c2:52:74:18:bf:4e:3f:99:bb:5b:51:61:
c5:7d:77:a0:f4:eb:15:b4:0c:70:31:bf:b8:b7:d7:f0:ec:f3:
19:9e:14:58:83:3d:e7:76:4b:61:da:f7:13:5b:26:ed:4b:ce:
1e:9d:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:28 2025 by rpki-client