Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: nD3zXMIJNv6jeq5vYEYSVoo4yiBNSwB82KYixha3v7Q=
Subject key identifier: F0:2D:11:53:ED:3C:FE:15:E0:21:65:56:4A:0A:AE:43:A0:68:9B:0B
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 0198D4DFDED662670B0E322CC6BBE73616EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: PLIATr47vOXRVs5DXz8te+yZwziCcG3n0VmT1We0okw=)
3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:de:d6:62:67:0b:0e:32:2c:c6:bb:e7:36:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=f02d1153ed3cfe15e02165564a0aae43a0689b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:aa:df:b1:da:ac:60:54:06:55:6a:0d:b3:b8:
17:f2:67:55:fd:b2:ae:89:18:46:20:28:bf:c6:e8:
25:51:38:36:72:70:da:69:5a:b8:2e:8a:d1:e8:74:
8c:12:1f:1d:2d:b7:19:5e:14:45:15:97:5e:5d:18:
38:a9:8f:92:d3:30:1e:c2:f3:e0:8e:52:47:7f:06:
e5:fe:24:02:f6:b1:ba:3e:dd:39:cf:62:e2:96:e5:
1f:76:81:64:6b:10:f1:8d:91:70:16:f6:d6:6f:3e:
2e:be:34:30:c0:c5:85:ad:a6:2c:92:ba:be:96:f0:
93:79:6f:f4:a0:08:26:f1:1e:68:82:01:ae:e2:f9:
78:5e:21:52:15:1f:38:ac:c0:3c:cd:04:fc:b9:94:
34:fd:11:a9:3e:19:6c:0f:63:04:4e:06:ad:b0:36:
a3:e9:98:8c:04:83:54:a0:32:07:7b:1c:60:77:ad:
25:f5:3b:33:f1:74:34:53:59:8a:d9:6b:c6:18:cf:
fb:0b:dd:ff:db:0a:3f:1b:49:c6:48:7c:b3:3d:e6:
8b:3d:50:bd:ee:7f:9b:ca:2e:44:87:a9:d9:97:ca:
a9:f2:37:36:d7:69:fe:0d:b0:f1:85:bb:bd:0a:8e:
13:c4:50:95:36:e5:c3:fa:a9:61:dc:c3:99:b7:13:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:11:53:ED:3C:FE:15:E0:21:65:56:4A:0A:AE:43:A0:68:9B:0B
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9f:51:7e:5f:f7:82:e9:20:32:ad:6b:2a:64:b8:d3:40:9f:
7f:15:d2:28:6a:81:86:1b:11:72:76:8e:6d:09:13:80:de:b2:
f4:c6:0d:54:2f:e6:b1:82:79:7e:e4:11:68:26:ab:8a:04:85:
56:5a:7a:40:5b:44:eb:1b:42:90:f5:ff:fa:ed:93:94:b0:0e:
58:3d:43:f8:14:63:63:47:cd:73:86:4c:0e:d0:d7:f0:83:6b:
71:ae:05:28:26:b1:8f:fe:3d:14:2c:ac:44:97:7d:17:62:83:
17:51:12:b3:6e:11:92:ef:46:21:df:4e:75:74:06:51:8b:74:
9c:f1:7a:41:87:52:2d:46:e2:e8:d0:76:ce:72:e3:b7:3c:fe:
9b:6e:bd:2d:18:a6:fc:46:e7:67:fd:51:16:03:62:47:83:6f:
30:bc:f2:6e:0f:c7:38:44:bc:07:45:e1:59:ca:b0:62:15:d9:
b3:17:ff:47:42:1f:56:0a:70:2a:88:60:b9:9a:5d:02:da:ac:
1f:cd:61:8d:af:b8:4a:8d:37:1a:24:1d:6b:d8:39:ea:85:49:
66:f0:92:23:62:31:46:54:cf:a5:5d:28:ec:0f:da:e4:f2:d1:
d0:2d:96:e1:39:d6:1b:57:23:0d:1c:a2:99:e9:53:61:43:88:
9d:a8:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:42 2025 by rpki-client