Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier: HhEOhbgqy9N5DyOZNhDmyb/Msg7J/vec7r5xRmWH8Fo=
Subject key identifier: 29:A6:34:BD:88:F5:D6:41:E0:A5:AF:FE:1E:3D:72:0B:D0:67:2C:FF
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 0198D4E000F7C0E578CE8C7B3DE719C07336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: T2mi5lr1BvC73AkqGy5bUvJDLMs8OiTDcLdcXtE+5b8=)
2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:00:f7:c0:e5:78:ce:8c:7b:3d:e7:19:c0:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=29a634bd88f5d641e0a5affe1e3d720bd0672cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:01:3d:03:93:58:46:7d:e2:53:b1:44:03:
dc:14:f5:8f:60:ff:c9:2d:93:5e:97:55:81:d8:28:
95:5e:fc:3b:71:3e:3f:b3:a2:30:77:80:61:74:89:
d9:ed:e2:d8:6f:4d:1e:c9:1c:7b:92:74:f0:e2:c0:
7f:ad:08:ec:fe:27:b1:23:ba:72:28:86:c4:b4:1c:
b0:54:77:ce:01:90:b9:b8:21:8f:3a:05:5f:0d:3c:
2a:41:f0:26:fd:4e:2b:57:a6:dd:94:a4:ea:49:d8:
75:8a:33:03:a5:2f:f1:0d:a3:89:47:d9:55:cb:c8:
8c:31:3d:14:42:4f:aa:bc:87:ce:25:cc:6d:99:a6:
fb:bd:50:56:a6:e3:61:5f:96:71:69:5d:c1:86:32:
9b:30:ce:d5:5a:43:29:65:ee:0d:62:d9:01:62:20:
e6:8b:f4:12:3d:a8:85:41:c0:e3:3d:78:cd:d6:80:
71:aa:9a:b5:8b:ad:b3:ce:bd:0b:6e:61:4f:7f:67:
53:40:ad:3a:44:35:54:52:71:7a:0f:4a:9e:e8:8d:
65:d0:13:01:23:38:32:d7:55:6a:cd:a5:a5:bf:c8:
a7:e5:1d:dc:b3:04:24:ac:a8:da:69:65:fa:fb:49:
61:b8:9c:29:08:2f:07:fb:12:c2:e4:b9:8f:87:fb:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:34:BD:88:F5:D6:41:E0:A5:AF:FE:1E:3D:72:0B:D0:67:2C:FF
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8a:bb:41:0d:d4:da:dd:13:68:99:7c:22:40:0b:a8:5d:63:
19:b0:42:67:e2:75:37:bc:98:64:72:c8:22:d6:11:73:1a:b0:
8e:6d:3d:92:97:89:dc:53:a9:eb:bd:ca:0c:61:d6:9f:29:90:
f6:d0:8b:15:f4:d6:1b:a7:7c:a2:fb:0f:8c:d7:74:16:68:9d:
46:0e:11:c6:d8:c1:a7:21:49:2a:b6:4c:da:4b:f6:fe:36:9f:
56:19:50:f5:74:1e:57:d4:a5:ef:16:04:58:f4:57:4c:ec:5a:
72:58:6f:3b:e7:a7:7c:db:40:ba:d9:4f:00:91:1c:23:02:97:
4c:34:bc:b9:ab:78:09:1a:6f:b5:d8:73:6f:3e:d3:d8:14:14:
33:01:88:33:a5:4a:0b:5e:5f:2f:ae:e7:09:04:09:85:8a:03:
df:07:78:fc:b2:68:07:fd:93:92:d8:bd:d4:3f:ba:fa:b7:eb:
93:53:5e:50:b9:f1:a3:ee:9a:01:3b:a8:80:fa:cb:80:2a:93:
82:2f:56:ba:b8:28:26:b6:18:86:1b:01:72:b5:d2:f6:7c:e3:
eb:e4:68:c2:f0:f5:66:62:5b:f9:83:c2:7a:8f:69:3a:48:82:
67:08:b4:7a:a3:f1:61:af:72:39:27:f9:d5:49:fc:17:fc:74:
6e:dc:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:42 2025 by rpki-client