Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: BF5hQNYbavHkq6BktbTHnfM3grlj7+svRyyVzu54CQo=
Subject key identifier: 97:09:63:74:8A:6E:12:AA:C7:62:C4:A7:BD:69:04:AE:6A:10:C3:B5
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 0198D47483CF41E3B62DFDE28ADCCDA41DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:04:22 +0000
Manifest this update: Sat 23 Aug 2025 01:04:22 +0000
Manifest next update: Sun 24 Aug 2025 01:04:22 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: ahB35x4c+pvsNTxHnuL8S5F31GfEVQTllS2sE02i7pA=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:83:cf:41:e3:b6:2d:fd:e2:8a:dc:cd:a4:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Aug 23 01:04:22 2025 GMT
Not After : Aug 24 01:04:22 2025 GMT
Subject: CN=970963748a6e12aac762c4a7bd6904ae6a10c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:81:61:4a:cf:d1:14:85:d1:fa:1c:9b:a3:
8d:66:b4:33:0a:8a:40:3b:73:90:cd:fe:69:85:18:
4d:80:c6:92:64:99:6a:df:d8:d4:6b:94:d5:42:d0:
ca:ed:59:51:99:28:47:26:39:ab:ba:bd:0a:da:32:
b8:3a:0b:06:c0:60:ec:31:6b:af:b0:7b:3f:91:a9:
9c:90:e5:b2:77:ec:65:a7:28:fa:6d:88:48:44:3e:
0e:54:02:eb:d0:10:a3:77:5b:f5:b3:50:4f:b2:4e:
fb:ab:2c:cb:51:9b:1d:c3:a4:25:83:e9:64:28:29:
3f:df:55:4c:5b:65:a6:75:e7:bc:67:4b:90:76:f2:
b0:8f:da:ed:4e:f1:1c:90:af:44:1b:09:2a:b8:d3:
b8:1f:a0:07:42:14:68:73:70:89:55:d3:74:01:ae:
75:64:fe:1c:51:0c:0a:5d:39:1c:45:ce:a9:9e:a1:
21:f6:00:72:51:cb:2c:29:3f:51:38:59:38:c7:90:
98:41:fe:bc:b9:7c:b1:16:f6:30:b7:12:bb:7f:a1:
f2:76:d5:19:a8:a7:64:6c:02:5b:7b:9a:1f:c2:6f:
da:75:d4:b0:d2:d3:42:23:1f:0b:c3:72:32:3f:f5:
ac:7b:6f:9f:3d:b0:a0:31:8a:87:3b:e2:f5:91:95:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:63:74:8A:6E:12:AA:C7:62:C4:A7:BD:69:04:AE:6A:10:C3:B5
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ca:9b:8f:4f:c4:4b:e6:f5:a5:70:80:52:91:fb:11:82:01:
1d:2e:70:7f:49:00:20:3e:02:6e:b1:f8:18:b1:b0:f9:2b:45:
29:4a:08:3f:db:86:85:49:a4:53:c9:8d:51:cf:19:66:d5:25:
6c:9a:bc:55:52:60:e6:07:93:6c:72:9c:d2:1c:28:ea:cc:e5:
52:53:7a:a4:b1:b9:96:8c:7c:85:0b:87:12:77:f8:a6:6c:4e:
bf:28:8d:95:67:44:3b:80:39:fe:c9:b5:5a:bf:cf:c8:f5:95:
8d:85:4a:6e:7e:35:0f:1a:24:33:fe:ee:61:30:6c:c4:7b:98:
a5:7b:2c:df:3d:b3:f6:ee:db:b3:fe:7e:0f:ab:b5:2a:06:6a:
70:2d:2e:ff:12:09:cf:56:3a:9f:f0:bc:58:96:35:2b:34:6d:
51:96:fc:6b:44:89:a0:e9:a4:f0:55:a5:08:b4:ff:9e:6a:a1:
3f:bb:79:95:ef:61:57:0c:0d:94:69:7b:40:c9:0f:c7:d2:05:
1e:41:a4:38:62:ff:d8:24:d4:c7:60:d2:1e:a3:a0:3a:9c:38:
b0:16:3e:86:74:c2:eb:92:0c:fa:41:e8:73:95:74:05:5e:14:
dd:ed:6a:54:ec:c9:8c:cd:f5:0e:72:6b:ff:fb:2d:02:d9:33:
ba:3c:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:43 2025 by rpki-client