Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: j3PU5ivItWVgTGKc8IXt8jGGYwSvOscF/qCF94cWuuk=
Subject key identifier: C0:46:72:EE:35:E1:EB:3D:3F:FB:8E:56:61:AB:6C:CA:1C:64:B8:96
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 0198D6CD3834A5FECDB990133DA47FB5B0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 1177
Signing time: Sat 23 Aug 2025 12:00:30 +0000
Manifest this update: Sat 23 Aug 2025 12:00:30 +0000
Manifest next update: Sun 24 Aug 2025 12:00:30 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: VooMim7bDI0/kjFGCWwjbHtgheYXVP5tAXajeJDxJEI=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:38:34:a5:fe:cd:b9:90:13:3d:a4:7f:b5:b0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Aug 23 12:00:30 2025 GMT
Not After : Aug 24 12:00:30 2025 GMT
Subject: CN=c04672ee35e1eb3d3ffb8e5661ab6cca1c64b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:72:61:a0:36:55:ef:a7:3b:b1:ca:cf:f7:
a5:8c:10:b9:aa:0d:a9:80:20:d4:3c:e3:07:d8:4a:
c0:3b:60:e5:53:27:18:c9:f8:f2:64:3c:85:d6:23:
91:af:04:57:84:7d:f2:cf:8a:d4:a5:4d:b0:fd:f8:
da:0d:42:59:25:2a:bf:c9:9f:de:e9:ed:30:ac:8c:
66:57:d4:61:9d:7f:2a:93:11:21:8e:6c:38:6f:bf:
29:71:c7:ca:fb:6f:4a:1f:a0:ba:c4:d4:39:d8:da:
69:d4:2e:fd:a2:6c:fa:16:9a:fe:df:75:4a:30:67:
a3:3f:c1:21:07:47:99:31:b6:52:a1:0d:12:e4:38:
7c:58:4f:67:6d:59:44:76:d1:99:d2:ff:9f:95:a9:
62:3e:c8:58:3e:ae:ae:6d:08:1c:8b:c5:5c:41:9b:
89:99:b9:e7:cf:13:02:dd:93:ac:4b:7a:d5:6e:44:
49:05:60:f1:c7:09:eb:5d:67:63:13:60:c8:4f:de:
5b:0a:dd:bd:b9:da:1a:f4:84:11:a5:12:25:8f:7d:
f3:d4:49:69:a8:ab:f6:65:19:fd:d1:53:7d:f1:3c:
fa:be:1d:ba:e4:83:34:7f:ae:24:72:f7:78:88:92:
65:37:bc:ad:73:c3:65:b5:8d:39:ab:08:ac:bf:af:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:72:EE:35:E1:EB:3D:3F:FB:8E:56:61:AB:6C:CA:1C:64:B8:96
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4f:20:98:fc:14:79:95:50:95:9b:f3:1b:a1:66:d2:3e:55:
26:66:65:f8:0f:21:7c:a1:9c:7f:ff:9f:6f:ec:85:a0:bd:ea:
94:31:e7:95:2e:f0:17:c3:c7:d0:a7:51:e3:f3:2a:3d:89:93:
38:0a:ab:d6:b2:fd:05:2e:03:18:77:ee:e0:bd:83:9c:dc:bd:
33:74:0e:01:56:77:59:70:a6:18:32:9d:2c:4f:7a:b4:d3:27:
e3:24:f0:f2:94:77:44:bd:40:cc:55:2d:84:72:84:35:a5:d8:
ab:c3:62:1d:62:16:6b:63:70:68:70:b4:8b:a1:02:37:02:47:
dd:20:3e:f1:65:a3:51:f3:31:7a:84:c3:bb:e3:b2:80:41:a2:
d8:34:21:69:12:35:cf:02:7b:1a:b2:e6:db:b5:98:57:68:ea:
e2:95:56:7b:13:3c:e2:4b:cf:66:18:97:32:3f:3c:bf:fa:c3:
85:da:63:42:6d:3f:c0:30:6e:c4:d1:be:f4:6b:fb:7a:fb:90:
20:54:12:e7:65:45:80:fc:2e:97:43:f7:34:86:49:48:cf:dc:
4a:eb:3e:0b:45:e4:88:b3:76:e2:32:cd:51:7e:aa:17:29:3b:
84:04:33:1e:6d:57:bc:8d:d2:e2:fa:5b:7c:62:a1:cf:ed:0a:
5d:c3:30:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzTg0pf7NuZATPaR/tbDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl
NDZhMzMwHhcNMjUwODIzMTIwMDMwWhcNMjUwODI0MTIwMDMwWjAzMTEwLwYDVQQD
EyhjMDQ2NzJlZTM1ZTFlYjNkM2ZmYjhlNTY2MWFiNmNjYTFjNjRiODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTRyYaA2Ve+nO7HKz/eljBC5qg2p
gCDUPOMH2ErAO2DlUycYyfjyZDyF1iORrwRXhH3yz4rUpU2w/fjaDUJZJSq/yZ/e
6e0wrIxmV9RhnX8qkxEhjmw4b78pccfK+29KH6C6xNQ52Npp1C79omz6Fpr+33VK
MGejP8EhB0eZMbZSoQ0S5Dh8WE9nbVlEdtGZ0v+flaliPshYPq6ubQgci8VcQZuJ
mbnnzxMC3ZOsS3rVbkRJBWDxxwnrXWdjE2DIT95bCt29udoa9IQRpRIlj33z1Elp
qKv2ZRn90VN98Tz6vh265IM0f64kcvd4iJJlN7ytc8NltY05qwisv69AAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBGcu414es9P/uOVmGrbMocZLiWMB8GA1UdIwQY
MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt
ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2
LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE8gmPwU
eZVQlZvzG6Fm0j5VJmZl+A8hfKGcf/+fb+yFoL3qlDHnlS7wF8PH0KdR4/MqPYmT
OAqr1rL9BS4DGHfu4L2DnNy9M3QOAVZ3WXCmGDKdLE96tNMn4yTw8pR3RL1AzFUt
hHKENaXYq8NiHWIWa2NwaHC0i6ECNwJH3SA+8WWjUfMxeoTDu+OygEGi2DQhaRI1
zwJ7GrLm27WYV2jq4pVWexM84kvPZhiXMj88v/rDhdpjQm0/wDBuxNG+9Gv7evuQ
IFQS52VFgPwul0P3NIZJSM/cSus+C0XkiLN24jLNUX6qFyk7hAQzHm1XvI3S4vpb
fGKhz+0KXcMw6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:50 2025 by rpki-client