Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: G8ET0R7sVUyWtkQeYd8+GlD97AbCj8Ikie7oK9DWoBw=
Subject key identifier: EC:39:98:80:B9:82:53:E3:0E:CC:20:48:3E:C9:B7:E4:1E:91:E3:C9
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 0198DA06917C981B0D91FFC567D0FFC10517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: B1
Signing time: Sun 24 Aug 2025 03:01:59 +0000
Manifest this update: Sun 24 Aug 2025 03:01:59 +0000
Manifest next update: Mon 25 Aug 2025 03:01:59 +0000
Files and hashes: 1: 3GJ0bOfekp5L6arp0MI-w_XPimQ.roa (hash: 0lzM9+wo3VrPT3aYhPai/br06U/H49IVoIizC5oG8Xc=)
2: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: 5F6BVnPzDAy3buOceQO8gKPwRc5equDK2cXVnsw3BA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:06:91:7c:98:1b:0d:91:ff:c5:67:d0:ff:c1:05:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Aug 24 03:01:59 2025 GMT
Not After : Aug 25 03:01:59 2025 GMT
Subject: CN=ec399880b98253e30ecc20483ec9b7e41e91e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:b6:53:1d:8a:6d:8a:a4:d6:8b:bb:10:bc:
35:ea:0b:7a:4d:75:62:d9:6e:ae:ac:35:49:b5:dd:
4d:f3:38:42:fd:b8:1d:48:70:97:bb:12:cf:f2:ab:
6b:d2:dc:79:8b:f9:58:56:ef:3d:08:0c:7e:36:61:
a5:cc:75:08:b3:a3:3b:2e:a9:c4:f9:87:2e:aa:ad:
00:d5:73:88:4d:8d:2f:3a:bc:3e:1b:71:a0:1d:10:
40:fe:37:96:e4:99:82:a6:6a:6c:d5:58:99:38:e1:
34:b7:fd:32:fa:0f:ac:ec:b1:23:35:a3:b1:a6:a9:
9b:25:1f:60:e3:f3:8c:d2:65:47:e2:36:25:87:78:
16:77:0f:a8:32:c0:5c:b4:33:ee:0c:4f:39:72:d6:
88:96:5e:9a:af:78:f9:c0:90:b4:ef:a7:84:01:12:
f9:37:b7:8d:c5:dc:43:23:83:ff:7f:7e:e7:ef:9b:
4a:96:8f:a3:60:97:0f:ac:f5:18:f5:a8:98:68:12:
9a:85:2d:0f:b0:f6:52:fe:d9:31:65:53:f1:d6:61:
04:ba:e8:e0:5b:b3:56:ef:37:e6:02:bc:63:f4:85:
6a:aa:b7:83:b4:c4:0d:93:6f:42:f5:b0:11:d4:7c:
fc:75:ed:34:35:3f:01:95:23:ef:2b:af:ea:7d:06:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:39:98:80:B9:82:53:E3:0E:CC:20:48:3E:C9:B7:E4:1E:91:E3:C9
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5c:4e:c8:a5:37:5f:ab:de:fb:2e:ba:19:c3:0f:b1:b1:8d:
3b:07:bb:45:0a:35:52:57:1a:06:0b:5d:da:8f:5c:12:fb:1b:
9f:f6:ec:7d:4a:52:f5:d8:34:71:b1:da:36:a4:f6:ea:09:1b:
9d:66:22:cb:92:a4:0e:28:1b:f1:13:ec:69:4c:34:bb:45:27:
26:2a:87:67:c3:5f:ef:f7:6f:7c:c2:e2:33:d6:b2:9e:bf:6e:
b0:68:d5:ef:14:e7:09:46:1a:43:c2:2a:48:13:cf:91:95:d9:
ed:ec:20:33:36:06:93:39:c8:f5:2e:f9:e3:40:af:4a:02:ab:
87:89:b2:87:5b:2d:d5:a7:80:72:cd:5a:c2:31:7f:01:cd:71:
64:46:fb:70:b2:3e:a0:6d:cb:75:21:10:8e:c7:23:f9:ea:30:
1d:35:41:e9:16:64:00:a0:96:b5:f6:bf:70:aa:e8:1b:a6:b0:
3e:66:ee:67:ed:5f:95:5b:2e:9a:d4:45:0c:d0:9e:95:8c:27:
7e:b2:42:7a:bb:d8:e4:bf:c8:1f:37:73:c6:41:91:d4:8d:b5:
0a:7f:20:99:e9:48:87:82:52:d8:24:40:b4:20:63:32:60:9a:
88:d6:0d:ae:33:ce:2b:a5:70:ff:52:dd:54:4a:86:d8:87:44:
a4:34:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:24 2025 by rpki-client