Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: RDynbWKsUJT9vVf3f5zZFVOTwGFXfsKMD/35CLf3u6w=
Subject key identifier: 32:02:1B:77:AD:B5:86:5E:59:34:E9:8A:6B:5E:60:85:B5:F7:17:E8
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 0198D6982FA4FD741E5D3EB7E708B2741E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0950
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: Supxyj3z3mgiVwth8OoLE8GqW5NC1+ofxVG7Tz1pmrU=)
2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2f:a4:fd:74:1e:5d:3e:b7:e7:08:b2:74:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=32021b77adb5865e5934e98a6b5e6085b5f717e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:c9:eb:e8:2b:06:f8:94:ec:30:cf:34:78:
4b:9b:40:e2:9c:a5:37:0e:cc:e6:9d:6e:07:b1:5c:
69:c9:d4:4e:65:fd:f9:51:b0:cd:69:e7:63:d6:1e:
7e:da:9e:a0:cc:3c:f5:d0:e2:32:98:58:5e:ab:86:
8e:f0:83:90:2d:05:b5:24:cf:b7:dd:db:6d:73:0c:
4a:14:67:81:17:4d:d2:4d:57:2b:53:32:9c:e4:67:
c0:56:8c:05:43:f3:f4:2b:aa:5c:5e:ac:fa:0a:14:
25:e4:ef:b2:8b:11:08:f9:1c:3c:53:03:de:05:ed:
cc:61:4f:61:98:fe:03:92:f3:78:41:94:45:c3:d5:
24:b8:e3:63:65:44:e4:94:c0:cc:b8:00:49:a4:4d:
81:b0:a9:8d:c1:46:ec:2f:3f:50:55:fd:17:2a:f6:
3a:aa:64:4f:fd:65:a8:4c:f8:2e:97:ea:0f:34:e6:
bb:2f:d2:4e:59:b4:19:5d:f6:1e:ec:b9:22:9e:0f:
31:dd:30:f6:32:ba:c0:74:06:f1:9b:fc:bc:66:6d:
1d:81:d8:26:5c:a5:53:f2:dc:25:f4:74:1e:07:f0:
6b:02:dd:2c:58:da:0d:87:7c:8e:9a:4a:14:6c:60:
88:9a:1a:d2:2f:c4:da:1f:87:25:b5:1f:e5:1b:89:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:1B:77:AD:B5:86:5E:59:34:E9:8A:6B:5E:60:85:B5:F7:17:E8
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:86:ad:9d:22:f1:b0:26:7d:06:7f:c7:c0:c3:35:73:04:
fc:e8:3a:4c:cf:b8:45:9a:9a:f5:a9:aa:73:03:cb:00:c7:97:
e4:12:4f:38:b6:7f:55:d6:3f:02:b5:9a:1f:bf:a5:bd:17:11:
17:49:af:5a:0e:e9:a5:b2:f0:bf:70:0a:ca:49:e6:01:77:36:
70:f9:a5:28:d9:75:e5:01:ce:00:36:a4:7a:45:63:60:91:95:
34:a6:9a:11:94:cb:92:34:8f:8c:ae:9e:25:38:4b:85:35:19:
4e:31:12:13:36:54:2e:0c:b8:21:04:81:df:6c:ed:13:fe:42:
ec:94:2f:8a:23:0b:6b:49:e9:50:aa:61:10:1b:cb:4d:52:7e:
d9:97:56:cf:d9:e2:3d:10:db:55:03:fe:ee:b4:b3:05:3a:cf:
fd:85:8c:3a:2f:d8:a0:f3:b3:a0:cd:a3:f6:62:13:cb:d6:3b:
90:b1:86:41:a6:7d:63:1b:75:a4:37:a7:06:a7:31:f0:5e:9b:
53:8a:1f:de:06:dd:cf:03:10:c9:b5:21:df:d8:19:00:d9:a7:
6e:78:4c:bf:9c:1f:97:69:26:aa:30:1b:3d:b3:26:7e:8b:32:
f7:fb:19:43:fc:db:a1:78:b8:1a:17:b5:5f:92:15:79:bd:fe:
e7:a6:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:19 2025 by rpki-client