Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: eRedpzfzSwr/Q2hNj20KS8FwBGXT5sABBtff3aRsRCQ=
Subject key identifier: CF:51:1A:BE:ED:FD:ED:8F:01:44:4E:E7:00:EC:9C:52:DF:F3:48:E7
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 0198D6987A29B80DAB49FAB7DB948D13334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1630
Signing time: Sat 23 Aug 2025 11:02:53 +0000
Manifest this update: Sat 23 Aug 2025 11:02:53 +0000
Manifest next update: Sun 24 Aug 2025 11:02:53 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: t+E5NbTYPHZFEPI8U+bMxBFkyGXSNTimgbk+kfBpi+k=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:7a:29:b8:0d:ab:49:fa:b7:db:94:8d:13:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Aug 23 11:02:53 2025 GMT
Not After : Aug 24 11:02:53 2025 GMT
Subject: CN=cf511abeedfded8f01444ee700ec9c52dff348e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:b0:20:79:a8:99:02:56:a2:ac:86:d8:ad:
94:ba:e5:d1:a3:f5:b6:5b:34:25:31:05:1c:0e:7c:
56:f6:52:c1:07:53:43:cf:f7:9d:2d:5d:57:f0:cf:
7a:22:d7:2c:29:89:15:28:ed:f1:e8:f3:4f:8b:9e:
f7:c0:96:71:40:ef:93:44:f6:a8:78:30:d7:61:38:
c2:79:ba:9c:66:e7:49:8d:62:91:8c:7d:49:cf:dd:
45:48:ed:fc:ff:4a:fd:eb:f3:37:2a:d5:b1:59:af:
ea:1a:96:12:b8:81:3a:5e:1a:10:27:56:41:5c:bd:
12:2c:89:9a:81:3c:d7:4b:b6:31:37:23:ee:b5:c3:
bf:d8:81:3e:f6:61:ad:88:59:cc:90:9d:e7:e1:bd:
57:b6:de:e2:59:6c:8c:40:f8:11:5b:33:fa:0c:61:
6f:7f:c5:d3:01:cd:6a:da:98:64:a1:b7:a9:25:0d:
9f:9c:59:d5:4b:46:ee:c7:f3:c8:14:78:03:c6:fc:
6a:10:22:37:40:8a:1d:3f:d7:73:83:cf:ec:5f:c6:
05:61:5d:88:12:1b:cb:0d:16:79:d8:49:bf:18:89:
64:59:51:5d:5a:56:18:26:56:f1:a5:5d:03:92:ac:
22:61:4e:6b:1b:93:6b:bb:18:9c:a4:da:40:df:c0:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:1A:BE:ED:FD:ED:8F:01:44:4E:E7:00:EC:9C:52:DF:F3:48:E7
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:b7:77:d4:df:ba:5c:73:d4:c9:89:63:4c:0f:1a:f1:e8:
25:21:48:ae:cc:d9:5f:3b:0c:11:90:82:03:7b:11:a4:70:2f:
0c:65:8b:c6:a7:49:4f:db:ae:dc:66:2e:86:56:ec:5f:38:e6:
3d:d5:dd:e5:d9:a5:8a:08:d1:43:7d:d9:07:b2:d1:3a:92:22:
5b:31:8c:a0:d6:1c:f1:b1:3f:65:61:5b:10:e0:c0:b9:7a:d9:
f3:aa:b6:6f:17:5b:be:79:da:23:d0:9a:2a:23:a7:60:b4:4e:
e1:a4:8b:6c:0c:18:83:26:55:b9:8f:f8:43:72:f7:4e:eb:ee:
64:8a:54:fb:41:b4:70:d8:d3:eb:32:dd:bd:d6:33:12:69:cc:
26:79:70:ec:fb:bb:44:d4:1d:88:46:ed:44:46:0d:0b:cf:ec:
58:5a:44:1d:fd:a1:2f:b2:ab:4b:ab:3e:9c:1a:03:2a:08:64:
8d:72:1a:5b:91:83:9b:b1:23:c8:38:ad:b3:19:24:97:01:0f:
d3:db:1d:b7:bf:3b:79:84:cc:35:d5:32:d8:9b:6d:c0:f1:3b:
9b:21:8f:38:61:96:a6:c5:d1:8e:0d:27:70:b3:d6:73:e8:d3:
17:ad:ae:c2:ed:e4:07:56:83:52:f8:b3:1b:cb:48:67:28:6a:
83:fa:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:43 2025 by rpki-client