Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: 9CdEt9rAwdm/1C5Qsixbajz9R+SmVoxcjrRiX8lMfZw=
Subject key identifier: 4E:63:EF:B8:DA:37:C1:92:76:F1:BC:0E:65:E9:0C:66:BA:6C:D7:01
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 0197B6D748156E888B33D94A53D4D8C66F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 022F
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: xF6ymYbpnzUS6PeUPQ1BPzdt2HNXCmXTe2W5XE8fbmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:48:15:6e:88:8b:33:d9:4a:53:d4:d8:c6:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=4e63efb8da37c19276f1bc0e65e90c66ba6cd701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:b4:87:49:f5:42:1c:71:ea:91:80:84:36:
c3:ca:10:05:e2:c4:5b:0a:95:99:d2:29:4e:2b:9b:
40:9f:09:dc:34:79:61:f5:83:15:bc:07:6b:10:d4:
9c:be:97:f2:66:17:ba:56:e4:15:7f:ca:e9:4d:94:
06:f5:a9:26:ba:a6:29:14:ea:d4:ee:d9:0b:b7:ad:
34:37:70:9b:75:59:75:d2:30:9e:db:36:a9:70:d8:
ad:62:71:55:ba:f2:7b:8c:ad:a5:65:bd:f4:3c:92:
37:a4:f1:7e:17:23:fe:06:2f:5e:70:15:27:a8:78:
da:49:ac:79:d1:3c:98:cc:0f:5c:97:c1:a3:65:a3:
ce:01:43:42:3b:20:58:96:be:fa:69:0a:5f:95:30:
53:d2:31:98:69:ca:53:88:d1:d9:12:3d:59:71:7d:
00:ef:11:00:2c:33:78:77:c0:8f:4a:5b:0c:5d:da:
02:67:87:7a:8b:42:01:ea:2e:cf:e2:4e:70:5d:8e:
12:23:6a:53:77:b9:26:51:96:8b:8a:cd:ce:0d:4e:
42:c1:e5:a5:b6:06:3a:a5:a9:55:57:ac:58:70:a4:
80:25:87:38:33:7b:a3:92:7a:d9:9d:3d:05:7b:99:
c0:67:de:af:89:b5:74:e3:44:c9:87:a3:0c:21:ba:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:EF:B8:DA:37:C1:92:76:F1:BC:0E:65:E9:0C:66:BA:6C:D7:01
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:5c:a7:16:d5:6d:5d:81:17:55:b2:29:80:bf:c4:25:f8:
6b:fb:06:1a:59:ca:ed:cf:f7:64:3a:d7:cc:2e:85:76:5c:30:
09:f9:8e:dc:3e:bb:b9:5a:44:ae:7e:85:aa:2b:d0:e5:12:97:
1c:db:96:42:2e:be:c9:24:92:24:c8:ce:5b:f4:2b:bf:c3:da:
e8:20:99:4d:cd:27:e2:1e:da:5f:bf:33:40:c9:e0:ae:d0:80:
83:a1:0e:37:d5:74:0a:f3:8a:a2:eb:de:da:40:e1:e5:c9:bd:
ca:96:3e:65:a4:0b:c0:14:50:e3:59:14:1a:e7:2f:bd:25:61:
22:63:c7:80:84:ba:2f:45:7e:03:04:9b:16:c0:54:97:4b:f4:
2c:a1:21:eb:49:63:34:4d:d5:10:af:83:ab:ae:dd:b3:c2:22:
be:44:92:ba:8a:6a:92:a0:3f:f2:2c:b3:c9:be:ee:c2:cd:e8:
58:4a:6f:75:71:ed:1f:93:fb:7e:c5:d3:41:fd:be:ac:23:a7:
e7:67:55:9f:29:3a:c0:54:16:b6:da:50:b2:7b:58:8b:6a:8f:
f7:b1:e8:1c:57:d4:2b:30:f5:7c:6c:c1:78:29:6e:d5:b2:d0:
ec:85:57:92:72:51:6b:ce:81:a1:8f:cc:ae:17:ee:2f:ae:bc:
07:ed:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:45 2025 by rpki-client