Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: mqY3Ck2UBqOiOm5CKunaP1iJVUxF9Yr+dIbFv80Tk3o=
Subject key identifier: 48:41:B1:F7:04:E2:6D:75:B8:EA:5C:DF:01:22:8B:1D:64:D3:5A:40
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 0198D47284AC26319C9AD089754C90D24BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: N5xgC9AvWoYWZTLoXfUHoA3E5i8ce9YcjMx116NwWXg=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:84:ac:26:31:9c:9a:d0:89:75:4c:90:d2:4b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=4841b1f704e26d75b8ea5cdf01228b1d64d35a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:4b:1c:7c:27:c7:0b:41:a9:42:f0:a0:ab:
ea:97:04:17:d9:cd:23:dc:15:46:6b:6b:1f:89:98:
15:2e:16:a6:f0:77:72:72:3e:c7:5a:a1:0d:49:24:
d1:2b:e1:70:b0:68:6a:ba:ec:b2:6e:45:67:aa:36:
ca:6f:a7:be:10:0e:3b:26:c9:86:10:e1:1b:1d:f2:
78:01:4a:d9:df:57:f2:ee:2c:d1:a8:e4:f3:2c:c9:
9b:a1:b6:a0:79:b8:b3:d0:a9:58:99:a6:a9:dd:19:
1c:c6:48:f8:d8:d7:80:26:91:7d:a1:3a:48:b7:22:
59:f1:d8:ac:b2:db:9e:36:3d:45:11:2c:7d:6c:60:
7b:13:5b:1c:cc:2c:e4:1d:c8:21:3b:14:db:10:77:
d0:19:6a:d9:d9:de:81:f4:ff:7a:9d:2d:63:84:56:
76:19:1d:e4:40:89:4b:c9:04:56:cd:16:27:af:c3:
a4:49:ef:10:e7:fe:3f:3b:04:c7:5c:6b:c6:86:9d:
b8:e3:19:ab:08:37:f2:f5:e4:a7:4a:0f:16:fb:8c:
d1:09:45:33:3a:86:32:fd:eb:26:69:c2:5e:89:2f:
ed:88:8b:47:6c:c5:a1:24:ed:27:a8:c2:77:6d:ee:
e4:09:e0:8d:f4:43:4b:57:c8:9c:4e:ac:37:38:34:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:B1:F7:04:E2:6D:75:B8:EA:5C:DF:01:22:8B:1D:64:D3:5A:40
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b9:89:00:d5:86:d6:f0:cf:18:67:cc:49:4e:8d:d0:90:c4:
85:41:61:df:40:60:11:83:14:41:1b:fa:91:dd:ea:df:9b:c2:
63:5d:d0:aa:49:7a:01:a3:9d:24:cf:6f:7c:c4:e2:78:db:95:
11:58:cc:ed:c0:22:89:3e:c7:61:b4:a1:c8:51:53:a5:42:b9:
64:0e:a5:5e:2b:da:9e:dd:2b:6c:d0:68:ee:6c:bb:c3:4a:dd:
a6:3b:3f:c1:76:4b:c0:26:44:0e:1c:b5:99:88:15:a5:c9:fb:
d8:b3:6e:08:17:1a:ae:78:fa:29:f7:9a:9c:47:44:12:21:6b:
41:cb:d9:a6:aa:ce:07:54:a6:cc:08:5b:09:26:b2:45:74:22:
a8:4d:8c:95:61:bd:8d:fb:ba:a2:bf:14:72:51:7b:80:fe:bc:
6a:7b:23:e5:13:24:4e:c5:9d:31:ae:6c:71:d2:70:18:ab:fc:
a2:05:44:e7:17:65:c7:d6:3a:db:f2:8c:e2:80:9d:49:dc:48:
a1:30:25:a1:a8:fb:4d:96:af:08:0a:b4:2a:d7:21:49:9c:df:
35:b4:c2:b1:66:ea:27:fb:ba:b3:ba:3a:4b:d8:d9:08:39:81:
cc:25:71:01:24:21:07:e7:63:13:8b:7c:15:dd:a1:b2:de:b5:
22:2f:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:54 2025 by rpki-client