Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: Un9CoGgmdlVGfKYZBdSlMeRLd6z18E9Pc3tm5pHLfZg=
Subject key identifier: D1:07:3B:BC:C2:04:40:E3:C9:6F:FD:C7:55:F3:B5:3B:FF:94:F6:04
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 0198D4728E6C9FF67163839661C56FE13D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 05A5
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: BVOJIYKEeDV8mbofh+x3uLAl1m3yySm2fTEhRl6FlnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8e:6c:9f:f6:71:63:83:96:61:c5:6f:e1:3d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=d1073bbcc20440e3c96ffdc755f3b53bff94f604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:9f:70:aa:ca:6b:7a:56:a8:cd:ad:fb:cc:
49:80:30:4c:0f:af:b3:1e:14:ba:56:6a:52:67:23:
9e:4a:78:f2:7e:7d:cd:3d:3f:a5:ad:c7:df:2d:d7:
65:e9:35:3f:95:80:4b:82:dc:ad:62:4f:43:3b:3c:
7b:ad:66:0b:83:ae:f6:1d:c4:a2:d9:ff:3e:65:26:
f3:d2:25:2e:60:d6:4b:f6:cb:2d:08:6b:26:88:4a:
a2:1b:20:79:1f:67:4f:00:60:de:cb:ac:68:7c:71:
ee:9e:66:34:ba:2b:e9:da:24:fd:73:cb:ef:74:14:
c9:c5:9e:2f:5d:40:28:59:c7:2e:d9:7e:7d:b2:6a:
bb:f5:bf:23:ae:cd:31:08:9b:fa:77:ea:72:ea:03:
1f:97:1d:ce:5a:b3:e4:19:63:2a:9b:8e:ef:ab:c7:
a6:ae:f6:e9:0b:6b:1b:7e:ee:92:60:f9:a6:fc:cc:
0e:b8:a4:2b:8a:d3:f3:4a:10:ac:ac:f2:41:64:c7:
95:68:d4:79:ff:3c:74:59:7c:b7:f6:25:bd:5a:30:
a0:cd:3d:07:a3:52:6d:04:32:e4:c8:37:be:d4:44:
4f:1b:41:24:4a:84:30:60:b7:ce:ab:a0:46:9a:ed:
9d:4a:c3:ef:28:e4:df:da:0b:ee:f0:57:bb:f4:08:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:3B:BC:C2:04:40:E3:C9:6F:FD:C7:55:F3:B5:3B:FF:94:F6:04
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0d:5a:b6:97:4d:42:55:37:62:b2:00:34:a2:48:43:6b:20:
ac:87:bb:53:7b:00:e2:f3:d1:a0:aa:49:4e:29:f3:82:05:04:
51:e3:9b:80:bf:bb:10:f6:d7:a4:c9:21:fb:a5:93:8a:0a:46:
2d:29:62:ec:98:55:7f:17:27:6a:c0:b1:0d:ec:31:3d:1d:ec:
67:c4:0c:3d:b1:ba:ce:e1:2b:3e:42:92:51:6d:bc:70:73:04:
4b:cf:3a:d4:95:7e:4e:4b:d3:8a:d2:fc:65:7f:41:dd:ca:21:
98:88:cf:c4:a3:1d:34:2b:00:6c:82:89:bb:20:52:9d:2f:6d:
2d:72:d8:f8:77:e5:e4:41:76:22:36:69:a1:d5:09:cd:7e:9b:
01:6f:6c:7e:2d:53:35:85:f1:8d:7f:0a:ab:95:cd:90:e4:e8:
24:99:d1:79:07:4d:a8:60:a6:d3:31:07:4a:6e:c6:57:cc:de:
17:1c:6b:f2:3b:68:e7:df:9e:43:8f:21:55:a3:a0:a5:ba:23:
bc:b0:ab:59:b0:df:d3:ca:2f:59:1a:18:31:61:50:35:b4:bd:
05:a4:7f:ed:a5:6f:45:5d:70:2a:d1:d8:a5:fc:aa:25:7e:57:
d5:6e:eb:5c:b2:1a:f5:b2:4f:bf:ed:b3:36:c6:30:64:61:76:
39:1c:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:43 2025 by rpki-client