Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier: oeFYa3Qo9yL3X3BJq+VO011fCcbbFb86IW5Og1hTav4=
Subject key identifier: 58:E8:74:15:CF:1E:11:25:59:07:C9:CC:DA:F3:FF:B8:37:C4:41:F7
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 0198D515D9480073580C92702E0D058CF5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number: 124A
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: NDP41gN8CNlECLeeTXiB3irVa-U.roa (hash: NHPnUFyVxDx6ULqS5NRDRG6OIw5kEx/T23RBy4+HG3M=)
2: js2bBD_I5yJI3Ud9Hr2ey1HFBOk.roa (hash: xsXDDwFas5f9a39GX28p7wV/dlDbG2nAM+0coXG2hrE=)
3: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: 0PqHZANbxhgXURTcSNDj7R5OqJP/iilsQbn7vtUeD0c=)
4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=)
5: uxTu2Af7G_ZNcFKBsHAS_BIRmZs.roa (hash: OAOgfI+ToS2uVsVUxA6LbD290GEB1RA6ap9BGvXIi7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d9:48:00:73:58:0c:92:70:2e:0d:05:8c:f5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=58e87415cf1e11255907c9ccdaf3ffb837c441f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:10:f7:c1:73:1d:bb:01:b2:03:f5:8d:c0:
90:ea:7c:f4:00:6a:78:62:7e:57:04:77:0e:56:d6:
3c:b3:c4:d7:bf:09:53:16:01:ad:b6:52:cf:31:34:
cb:61:d0:6c:f3:e1:2a:31:7b:a2:fb:32:c9:74:c9:
4e:a4:3d:a3:ce:be:74:b8:cc:ea:5d:3e:63:45:5e:
99:05:16:81:2a:c6:6d:90:9f:50:2d:cd:ef:a5:c4:
d4:eb:ee:1d:98:5d:d1:8f:60:a7:60:12:de:df:23:
15:52:04:c7:ee:a5:0e:4d:fb:7c:a3:82:98:99:04:
ba:e3:11:fd:bb:7e:cf:51:76:66:e8:fc:02:5b:09:
38:45:8d:a9:d8:34:82:38:19:7b:82:dc:e4:90:4b:
87:05:ba:f8:da:03:48:9f:62:7c:56:6f:3b:cb:9a:
de:9a:df:64:20:ac:f3:7d:02:72:26:f0:e0:0b:45:
85:6c:65:88:c7:8b:3d:f3:40:24:db:5e:f7:ef:21:
49:df:a9:dd:3e:3f:d3:0b:0b:87:c0:58:fe:4e:c8:
23:3e:00:98:cf:8c:e3:c6:81:ef:ec:0d:cc:e2:90:
4f:da:71:73:a2:0b:46:3e:4f:29:2d:38:02:c7:f3:
38:0c:19:c8:71:59:ac:96:2e:87:4c:cf:57:31:d1:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:74:15:CF:1E:11:25:59:07:C9:CC:DA:F3:FF:B8:37:C4:41:F7
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:59:ba:32:f4:63:b8:7b:7d:9d:b1:85:f3:87:01:ce:4e:0e:
cd:87:25:49:9d:c7:e3:94:9a:ee:eb:ee:2c:b3:3e:78:26:d9:
45:52:a6:5b:ef:1d:76:fa:ae:5e:bc:e4:ce:ba:b1:5d:76:be:
bd:0a:c5:4a:c1:6b:31:76:48:2f:d0:5e:29:0a:e7:79:34:fa:
a1:cb:8b:f5:d8:d6:36:c4:5d:fc:39:a8:bd:11:7c:06:68:1b:
6b:43:c2:70:bc:ec:fb:b6:f9:ec:34:b3:af:50:a5:63:71:84:
02:cf:d8:98:60:01:82:01:11:1f:ee:3b:ef:c3:c2:e2:75:d9:
67:7c:d0:47:e2:84:28:31:87:37:c8:3c:f6:a3:f1:ee:f2:78:
d5:54:38:df:37:f5:29:1f:9b:09:51:d0:5e:11:82:72:4d:a2:
5b:7e:ce:8e:5b:78:29:04:3e:a3:90:e9:e5:ca:bb:7d:14:2e:
0a:d9:c2:c2:6a:fa:fb:db:ee:38:a9:86:d0:ff:90:dd:9b:fe:
61:7b:26:23:2f:82:bd:85:ee:5d:7c:6c:dc:6e:bc:87:1a:c8:
3b:c6:e4:15:84:20:2c:73:db:fa:5f:e4:26:39:88:b1:8f:85:
2a:83:f6:da:95:3f:43:fb:61:41:ba:90:33:2d:e1:9f:5a:ad:
65:c2:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:53 2025 by rpki-client