Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: qQBWDL88Vva98KcMPXFi06RNrKkQ94F3u/Tur4TVfoQ=
Subject key identifier: 1D:50:0F:3C:5E:0F:6D:DC:26:92:31:4C:D8:2E:96:6E:9E:E7:34:40
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 0198D54E885F6C29D270F309C67400096906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: b9TYRMQpPb9CT8uHQWjTz41bebQQ/N03DuH2UCmxw4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:88:5f:6c:29:d2:70:f3:09:c6:74:00:09:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=1d500f3c5e0f6ddc2692314cd82e966e9ee73440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:1f:91:68:6f:b1:a9:d2:f0:ac:06:b4:24:
89:64:52:99:b1:29:47:49:9c:7c:32:8f:79:2c:ed:
68:9f:f8:39:d2:35:b7:9f:40:7a:ae:26:4b:19:fd:
b0:15:fb:ed:5b:33:63:2d:0c:12:04:8f:96:4e:4b:
92:f6:59:6c:85:7f:68:18:a4:8d:41:0a:c4:b9:cf:
db:f8:1c:d1:83:d6:d5:6b:51:44:59:da:30:fe:b3:
0f:c2:76:16:fa:fe:57:a5:2e:af:b9:16:a7:d7:c5:
8a:84:7d:a1:df:1b:e4:09:5e:dd:ea:54:ec:c8:39:
dd:8b:f8:25:37:19:5c:2d:ad:f9:2d:96:66:9a:58:
b8:74:81:9d:1c:2a:ad:a7:32:6b:c5:27:0f:90:15:
fb:c2:84:e0:48:dc:00:19:57:92:ca:79:2b:a5:34:
4d:d4:2c:e9:17:41:b5:bd:e6:ca:fe:7a:65:41:60:
3a:c9:54:dc:dd:29:fc:97:cd:f9:95:19:0f:c5:45:
9f:35:8a:46:ab:be:5f:66:f9:63:51:d4:cc:b3:25:
b0:e7:68:55:08:af:cc:45:19:a1:42:df:89:e7:87:
10:79:1d:a7:16:32:e9:27:3c:73:c1:e6:3e:2d:f5:
ed:49:11:51:8e:1d:8f:f6:d7:77:a4:0a:30:68:0c:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:50:0F:3C:5E:0F:6D:DC:26:92:31:4C:D8:2E:96:6E:9E:E7:34:40
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cb:af:6f:ac:0f:0e:72:0b:bc:91:fd:5b:4c:b0:5a:24:d7:
20:d4:18:1d:10:18:3a:20:a2:c3:67:12:37:90:b5:23:f4:3f:
c7:53:a6:0b:ca:90:9e:5b:09:28:f0:15:4d:86:cd:d3:9a:f7:
4f:53:28:73:c8:7b:4f:48:ee:45:cb:de:ce:89:a5:2a:67:57:
4b:c7:7e:15:f2:de:7d:a0:0e:ec:83:f8:c0:9e:bb:a0:54:eb:
ca:dc:8e:3e:56:7c:0f:a3:0f:69:d5:22:3d:1f:f0:2a:3b:e3:
74:9d:27:65:f3:99:f2:d9:cf:a4:33:b7:6e:2d:bf:28:21:b6:
0f:fe:1e:fe:51:61:68:2e:d2:7a:1e:45:be:98:b9:20:ff:9b:
46:c2:ba:4a:14:77:03:78:ff:46:de:64:68:f8:40:e1:e7:56:
53:95:a9:1e:17:f8:fb:be:4e:19:ae:c9:a1:5c:c4:94:85:06:
a5:66:ea:dd:0d:d6:f7:2a:06:8a:33:63:e0:08:1c:fe:08:21:
cc:61:24:50:6b:69:27:57:10:bc:fa:c0:00:e9:e9:24:25:8a:
91:aa:d2:ae:2a:e8:22:0f:5c:6e:dc:49:96:d3:6b:87:9d:a1:
07:06:01:04:a7:38:a3:4f:35:a9:0b:55:15:37:b1:bd:f5:f0:
73:b8:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:37 2025 by rpki-client