Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: 4AqA4k1cuiv3rK1GEMo1zp9iOuXse9xQBeKP8hNj7zs=
Subject key identifier: 6F:64:B7:52:9F:3E:3F:49:A7:27:B7:1F:0B:19:65:03:D0:55:07:E2
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0198D4742B134155011B3E399E197F84AD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0C9C
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: FLGSdRih1mth4DMX+C+cEFg2li/6x1wAZxcHAgO5u3A=)
2: T2qZTTFWVSNBNeXqRrv5AJne1B0.roa (hash: EWp0bMjXe6eEnMu430F2WwTP+lMlXpj/M+oOz9ex/1k=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2b:13:41:55:01:1b:3e:39:9e:19:7f:84:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=6f64b7529f3e3f49a727b71f0b196503d05507e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:68:01:83:ee:96:b6:2c:93:d6:f4:1a:dd:
db:d7:7a:69:d2:11:b0:dc:0d:30:5f:b6:76:68:2f:
a3:fe:ed:bc:c2:d0:d5:5a:b5:f2:24:02:1b:30:0f:
14:a7:1f:c6:57:47:b0:f2:9e:c2:c6:ca:b3:51:5e:
65:6d:d1:15:f5:dd:fb:19:03:55:cf:2e:4b:9a:25:
52:18:a8:de:1d:b5:a2:9f:6b:fb:85:04:eb:7e:f4:
97:2d:d8:97:7e:67:17:96:95:3a:4b:cf:af:93:4c:
3c:b3:57:27:89:67:66:9f:a4:48:22:79:95:2c:3a:
35:f5:38:6d:0f:d5:4f:31:76:9b:0c:b3:df:df:2b:
86:32:4e:0c:51:5c:5c:c3:d0:08:02:1f:e9:01:12:
2b:91:89:68:85:2e:c6:ee:42:62:87:cd:79:64:16:
ce:5e:f4:12:f6:6e:f7:2a:a8:9a:d5:2f:8f:a5:64:
fc:ff:1e:57:fa:95:16:78:2c:a6:2d:88:e3:f4:a6:
80:c1:ab:46:9a:6b:83:45:72:0d:ae:7d:6b:9f:4c:
bd:8e:cd:fc:f0:3a:cf:25:25:a1:82:54:b3:24:77:
24:e1:63:b1:36:ad:e6:bd:73:22:2b:cd:81:d6:9d:
35:c3:62:90:b5:94:44:61:d9:06:f0:16:71:2a:b6:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:B7:52:9F:3E:3F:49:A7:27:B7:1F:0B:19:65:03:D0:55:07:E2
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:52:28:0d:49:4e:8a:49:8e:2b:2e:75:8f:96:b5:3f:4f:d2:
fe:fd:97:13:63:fe:73:d5:ea:5c:e4:48:5f:30:92:48:5f:d9:
7e:6c:3a:b7:84:e2:12:32:b9:8f:32:57:dc:21:1e:26:c0:28:
44:da:2c:0b:28:52:78:67:70:49:3b:8a:b7:79:01:bb:45:8a:
52:c3:d5:c1:4d:92:23:62:42:c1:92:1b:c7:ab:33:de:7d:fa:
36:58:55:06:83:71:d4:52:49:b7:a9:73:eb:89:79:6f:be:a2:
a1:96:38:79:9a:07:fa:4f:81:0b:60:fd:b8:2b:8d:b5:0b:15:
cb:be:fc:29:eb:be:d3:b4:03:fd:b8:df:fb:a8:ba:1a:e7:dc:
79:0e:c1:1a:10:ad:75:72:67:7c:40:22:98:75:0f:59:12:51:
e5:fc:41:50:c9:d2:f2:37:96:9c:cf:9f:11:bc:6f:df:36:2b:
e4:9e:07:78:90:f0:db:83:36:ff:f9:70:47:7f:a3:ba:38:62:
bb:fe:4c:11:72:d0:47:f7:80:3f:1f:bf:cc:66:76:b3:fc:9d:
46:c0:a5:c3:3e:fe:99:be:1a:6a:a8:2d:ad:47:26:62:9b:27:
1f:41:b8:06:16:67:87:8b:33:02:3b:88:89:42:4d:43:ca:70:
ab:80:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:45 2025 by rpki-client