Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: 6bO1/Fv8sczyWFGkFHioN4xm4xpIBgnSBu6MPuE4OfI=
Subject key identifier: BB:FF:03:F3:B7:BE:3F:69:42:30:98:0F:8F:2E:A9:6C:B9:B3:1C:8F
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 0197B77C8CFACF56A69B0A5078012A3F25AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 119A
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: KV2aGuz1nePtSN3kLZnTrqZMKz2mCUobZSsW8ZFc224=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8c:fa:cf:56:a6:9b:0a:50:78:01:2a:3f:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=bbff03f3b7be3f694230980f8f2ea96cb9b31c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:77:87:c5:62:53:63:bb:cf:53:07:88:9b:
32:d5:93:07:bd:7a:0d:3e:2a:76:47:8f:d2:13:be:
a0:f6:d3:84:c1:c8:c7:6c:b6:a1:23:1b:19:07:d2:
7b:33:8c:58:d6:0f:cd:97:f1:13:83:51:b4:34:9c:
ff:41:1f:6b:ec:92:07:c3:00:97:c5:47:1d:fb:4d:
b7:de:fd:37:3c:b7:6f:fe:71:94:85:1d:ef:2e:a7:
3f:2a:95:6b:d1:3e:ba:18:9e:68:f6:e9:a8:8c:21:
bb:da:b2:db:54:a3:87:ea:c9:cd:41:72:f5:17:60:
c8:24:1f:a5:62:8d:29:75:db:46:0e:8b:33:e6:67:
58:87:9d:10:80:30:a2:a6:26:98:34:6e:bd:70:e8:
7e:26:4e:97:08:05:fa:bf:5d:40:32:c1:43:88:3a:
50:f6:75:7c:b0:2f:12:00:bd:8c:27:3e:a4:a8:a1:
22:ed:87:0b:27:0a:5b:ef:5d:a2:04:a2:5b:b4:42:
b0:c6:20:d7:9c:f7:28:3e:88:f9:af:cf:74:87:d2:
d6:5d:47:52:c4:06:66:48:b3:b0:0e:8a:58:62:06:
c5:b1:9f:44:17:87:e3:e6:8d:ba:7a:08:db:f5:df:
63:4f:de:ce:0b:f9:b1:3c:96:0f:9e:cd:48:5b:0f:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:03:F3:B7:BE:3F:69:42:30:98:0F:8F:2E:A9:6C:B9:B3:1C:8F
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:c3:2e:50:9a:96:bc:a1:c0:66:1e:d3:89:1c:d8:8c:14:
0e:e0:5c:59:c5:d9:d7:bb:cb:c5:a1:71:48:1c:e0:cc:c4:d5:
96:06:dc:58:a2:e9:1a:1f:2e:5c:d3:1e:35:09:0d:be:c8:81:
ad:e2:63:0d:f5:95:7f:20:45:d9:09:74:7a:fe:50:a7:83:e2:
f1:9d:52:2c:df:a7:9c:d3:06:27:63:d1:97:26:23:1a:43:d8:
34:c3:42:0c:e5:d8:0a:39:d5:ee:5a:e1:f3:17:3a:3d:e4:ee:
06:00:43:c8:6c:82:78:79:ac:e1:b2:dc:52:f6:27:76:3e:0a:
07:11:5d:f3:b8:36:68:2a:c5:12:1e:ac:66:91:16:e5:ea:c1:
76:0f:18:e5:b5:27:a9:24:e5:a1:16:a4:20:90:00:94:4f:10:
f7:38:72:bc:fb:6e:83:3f:c8:17:c5:48:2d:57:c2:07:5d:69:
ef:f1:20:1f:9f:40:f5:c8:d8:59:76:68:98:43:c2:18:31:c6:
86:21:a6:52:1e:d4:98:b3:52:a4:d1:a3:c5:58:2a:2f:6d:12:
dd:27:83:8b:9b:c1:8d:a9:50:c4:dd:85:8d:5e:de:22:02:ef:
25:dd:73:34:05:93:51:81:9b:34:a1:fc:eb:19:4b:fb:c1:63:
c7:70:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:12 2025 by rpki-client