Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File: Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier: 79c9Z4Qm/Segzza22f8PuHVvfv99oY8GqoeL5b5Jjwg=
Subject key identifier: BE:E4:60:5D:06:C1:DA:51:9C:75:A6:FE:0D:37:43:41:1D:C2:E5:CE
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer: /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial: 0198D7E10285BCBEC026FD34FC82C594837A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number: 09F4
Signing time: Sat 23 Aug 2025 17:01:44 +0000
Manifest this update: Sat 23 Aug 2025 17:01:44 +0000
Manifest next update: Sun 24 Aug 2025 17:01:44 +0000
Files and hashes: 1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: eGsve1gD769ntDa3ozTa1HnH0mLUebgVDCISbdregJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:02:85:bc:be:c0:26:fd:34:fc:82:c5:94:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
Validity
Not Before: Aug 23 17:01:44 2025 GMT
Not After : Aug 24 17:01:44 2025 GMT
Subject: CN=bee4605d06c1da519c75a6fe0d3743411dc2e5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:71:77:96:12:75:ee:f6:5c:55:14:99:11:
52:7b:32:ff:7a:a7:45:42:98:58:a6:88:93:f8:cf:
d0:8d:ae:10:bc:bc:0e:69:e3:52:36:a3:81:90:e0:
09:62:b7:97:2f:c7:1f:39:82:d4:7b:f9:90:0d:8c:
bc:0d:3f:a0:24:c6:5e:86:1e:48:76:da:bd:d5:65:
80:77:99:ab:92:51:5f:f9:d2:da:37:2e:9d:98:c1:
1b:f9:48:92:01:68:8d:a9:68:17:ff:11:89:d5:b9:
cf:46:d2:02:40:b9:a4:15:1d:59:e6:a4:11:38:70:
ef:1c:ce:64:a5:ea:1a:5d:70:c4:e7:4f:3b:fc:bc:
df:51:78:a5:d1:85:c7:74:1e:84:f5:3e:6e:fe:d7:
09:f1:3e:fd:cb:b3:32:5d:9d:d4:70:8b:4f:b0:a5:
1c:5e:f3:25:7f:c6:bb:98:10:8a:01:a8:e8:7a:de:
a9:0e:f9:8a:c7:2e:85:6d:d5:08:fe:4f:8d:35:a3:
e2:5c:54:9f:3a:68:bb:35:70:e2:68:ac:71:8e:a6:
a5:3b:26:44:17:fc:f9:31:d9:fe:74:68:65:ca:7f:
66:8a:29:11:d0:35:e5:20:ac:f7:53:07:d0:26:d5:
8e:a2:ce:96:d2:5f:73:31:11:2f:f8:6c:38:56:d1:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:60:5D:06:C1:DA:51:9C:75:A6:FE:0D:37:43:41:1D:C2:E5:CE
X509v3 Authority Key Identifier:
keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:53:12:67:b7:9e:b4:ef:da:aa:23:af:ed:0f:30:6f:24:
00:06:e4:f1:fa:a2:e7:e4:90:2d:bc:a3:2a:52:8e:28:83:43:
91:d6:5b:25:cd:a4:b6:9d:39:9d:aa:a6:35:27:63:1f:3a:20:
6e:7c:88:5f:23:0d:2b:8f:94:4c:89:85:8c:22:df:f0:68:20:
20:69:bc:94:a4:b3:3b:cb:ec:60:28:3b:ad:6f:6b:5f:7d:9f:
2e:c4:0f:02:13:52:14:f6:72:78:58:08:59:60:e3:23:65:72:
b5:6c:b4:5c:85:86:bd:5a:8c:67:3a:01:19:b3:0f:e6:30:15:
03:6d:30:5a:cf:7d:5d:1b:b5:d1:fa:bc:2c:99:84:0b:ca:0a:
f5:2d:e1:d9:40:48:1a:3e:90:6f:f5:34:f5:83:cf:50:1b:bb:
58:2b:14:72:4e:66:de:f7:37:29:58:28:9b:fc:6c:b6:45:8f:
08:13:a7:17:d5:3c:b5:99:16:92:7d:79:78:dc:fd:04:23:d5:
5c:e3:e2:e0:99:b1:e9:e8:3f:bb:c6:cb:0b:63:f9:bc:bc:b4:
9c:a4:56:c2:39:2e:99:a0:ed:c4:9a:4c:4b:e8:d2:21:3e:58:
db:64:4c:a0:06:c8:d3:1b:86:a9:49:a4:f0:ca:f8:17:75:74:
ef:ec:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:38 2025 by rpki-client