
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: vftCX6zKadiUDpW9rmneKJ/i1AA10T3lY5AqH4R6VZM=
Subject key identifier: D3:3B:17:2B:B3:19:AD:59:F4:9E:EB:24:7A:C9:E6:42:65:4E:F5:AC
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 0198D660FD70CBD7EDB7A879FEAAE133C961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: jtOnnEYgm+ULlRf1Y+giGijQvOZBMP13qqA8zlexQQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fd:70:cb:d7:ed:b7:a8:79:fe:aa:e1:33:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=d33b172bb319ad59f49eeb247ac9e642654ef5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:3d:6e:c8:78:62:f0:34:cd:1b:13:de:e6:
16:49:75:fe:e1:2e:d3:2b:04:37:ef:32:2b:49:33:
da:36:86:cb:95:66:a0:16:92:8c:ca:f4:bf:61:73:
c1:73:1a:84:72:96:ae:0d:ad:75:00:55:18:96:15:
af:9d:8f:e9:c4:e3:16:7f:f9:9a:85:b8:dc:ef:96:
1a:4a:da:8c:dc:ed:e0:94:6b:27:70:96:0c:7e:48:
57:67:af:cf:9d:23:5d:ca:f8:0d:a9:38:69:6d:01:
51:59:b6:a7:31:70:71:96:e0:0b:03:0c:94:ce:a6:
d7:5a:db:af:4f:99:4f:bb:21:ed:18:12:cb:16:c4:
5f:56:76:1f:9a:1d:0f:83:64:49:cc:71:a8:1d:d0:
48:a2:29:94:a5:ca:b5:57:5c:dd:38:94:2a:09:03:
ce:81:79:5b:69:f7:20:25:46:d3:79:f7:26:92:de:
89:ad:e6:10:1e:fd:b5:f5:2d:c6:b2:66:f1:2f:9a:
43:2b:38:04:31:ee:d0:8e:70:85:c6:ec:51:2f:22:
a0:c1:21:fb:2c:da:1b:47:1b:69:35:e1:c5:cd:46:
5f:3e:1d:44:62:0c:c2:d6:cc:16:ee:1c:3a:80:5a:
91:b1:35:e0:9e:c5:54:0b:7f:25:7e:ad:15:47:db:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:17:2B:B3:19:AD:59:F4:9E:EB:24:7A:C9:E6:42:65:4E:F5:AC
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:98:b8:83:c9:1c:c7:43:6b:67:bb:03:71:cf:b0:d6:90:fb:
99:f9:8b:77:fa:7e:dd:2b:fc:34:df:20:40:cb:a5:eb:27:7d:
e7:c0:a9:32:ea:b7:e4:ae:be:87:71:8f:ac:d2:3c:6a:44:43:
98:e2:52:6d:89:64:0a:61:98:fe:a0:af:79:1e:4c:da:7b:d3:
48:24:ac:95:c0:8a:5c:4f:6a:43:03:40:6d:31:f9:99:94:52:
14:fc:26:b5:c0:1c:d5:c0:4d:61:f5:81:b6:6c:5c:4d:ed:32:
e5:81:57:42:5d:2f:5e:c0:86:9d:7c:12:b9:d8:4b:20:d2:03:
87:38:7f:32:08:90:0a:71:be:e3:e9:65:3e:b6:79:1a:8c:4f:
08:99:c1:8f:ff:f2:12:52:9d:ea:e0:72:e7:da:cb:b0:70:da:
c4:6c:5e:7c:a3:bc:5e:b1:36:04:c6:29:0e:67:fd:46:a3:85:
98:5f:34:84:f9:2e:b6:58:2b:3f:a4:99:bf:bb:88:f6:a1:e5:
18:c3:6c:ef:c1:c7:58:37:71:9e:5a:f1:90:69:19:98:f0:69:
b3:78:31:36:df:cd:08:54:32:ab:4d:82:1c:f4:c3:29:ba:2e:
97:c6:c3:67:53:2a:bb:ed:1f:9e:b6:b3:1f:a2:49:55:e0:db:
13:8b:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:58 2025 by rpki-client