Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: 5nsStWCLtsVPJguK/5gv9ZiL6rfWJPWY/heSX+c+ai0=
Subject key identifier: E6:07:79:45:3C:1E:A6:60:B8:6C:2C:18:8F:72:81:6D:B9:C5:55:65
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 0198D5BB9E19F7D9BEE8AF65813AE06ED9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: WJFhne4m2kmavX5NN1tsu2x5RrO7NI3x63VKldtykxo=)
2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9e:19:f7:d9:be:e8:af:65:81:3a:e0:6e:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=e60779453c1ea660b86c2c188f72816db9c55565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:66:f0:ac:c4:69:c9:c4:95:30:87:6c:e6:f8:
df:fe:1b:8c:01:74:8c:9d:2d:c2:9c:8c:2c:f8:97:
42:06:cb:26:eb:9a:aa:85:0e:cb:70:93:d1:0b:8d:
6b:28:9b:18:d2:b2:6e:b4:17:15:db:82:f3:15:30:
3b:8e:fc:ad:e0:39:d3:74:d6:cd:9b:dc:18:45:24:
67:9e:e8:85:53:39:07:1e:0e:dc:41:f9:57:8f:3c:
22:01:21:2f:18:be:b2:69:fe:7e:5f:ea:76:e5:d6:
75:d8:ce:e0:38:b0:2d:d8:47:dd:ea:13:78:35:c5:
37:66:db:43:fe:1b:d4:22:e2:c8:97:7d:a4:6a:7f:
70:54:2b:8c:1d:d0:77:32:f1:74:31:c5:4d:12:45:
44:96:74:3e:0e:8a:07:81:a3:26:e5:46:cd:27:5b:
d4:5d:6d:2c:12:ff:78:be:b6:b8:99:88:33:aa:21:
e3:8f:46:48:54:53:6f:ce:60:cd:28:af:d1:2b:c9:
7f:46:cd:df:8e:7b:7c:4c:9e:49:1f:2b:85:76:04:
5e:51:16:20:f6:5d:be:df:63:8a:11:a0:99:f9:ea:
13:05:c6:69:f3:29:af:63:36:9d:95:9b:e2:7d:a0:
18:bc:2c:da:55:4b:42:07:95:5e:97:76:4b:17:a2:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:07:79:45:3C:1E:A6:60:B8:6C:2C:18:8F:72:81:6D:B9:C5:55:65
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:ae:26:14:55:c9:bd:36:3e:bb:d7:a9:44:7f:4c:3b:52:
06:04:60:4d:74:ee:a4:92:e7:bf:b2:69:af:e9:64:c6:62:47:
ca:3e:b6:8a:32:1d:ed:0d:37:b7:66:c3:4b:4c:ab:56:3f:cd:
71:ff:a9:fe:2d:0b:0e:46:87:1c:91:c4:36:e1:fa:32:36:e1:
9f:f4:20:b2:af:9d:3d:56:1a:29:1d:99:6e:6c:d6:2a:ec:27:
82:cd:95:4c:8c:b9:06:3a:ca:50:56:a0:b6:14:61:2e:4b:67:
e8:90:83:4b:f0:a9:76:fa:fc:41:f7:f3:6e:26:97:ed:fa:bd:
45:fc:0e:10:b9:a3:c3:75:45:03:58:0f:2a:e1:18:b9:8c:89:
a7:ca:27:b1:b1:7f:0e:e1:ca:05:d7:13:fb:38:a1:58:48:17:
63:ee:43:e2:98:25:89:fe:30:ef:d4:16:43:f6:75:cd:b6:b0:
74:87:cf:41:41:88:7d:3a:a3:24:c0:1c:e9:cf:1d:a7:6c:19:
e2:03:5a:c7:45:bd:99:05:56:ba:8e:88:80:77:76:75:bb:7f:
6d:b7:c7:39:a6:b9:28:6a:98:7d:8f:72:eb:55:ac:1f:de:e2:
b9:28:5d:a6:23:0f:e7:9d:d8:0d:63:c2:b2:ec:8f:a1:e6:94:
8b:b2:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:23 2025 by rpki-client