Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: gdYaVrHgzeqZuS47C+GT3RjarNwJ+LmfwqrP76mxacQ=
Subject key identifier: F1:A8:8E:72:F8:BE:0F:8A:1B:D8:FA:A7:E7:DC:72:71:DB:35:FA:4D
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0198D5BB8C3C82769021417F8AD50BD88132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 151C
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: 1-B2R-GqYD9hP7s0C3NBoCj-VNkE.roa (hash: ZOT8fcQn6mXuR7Nt7wxqiMRNnXCqSmMF7Ydjm3uUWkE=)
2: G_6VP_k1Ac7XsfwHZplzKNZshbU.roa (hash: 6XxctL37SggU5aHM9b07WCLQFXzsmmU2bsXFoQDbvLQ=)
3: IJG_JRq8zqVeP27DEEQlEOWiORs.roa (hash: KQiGsENOOusiUE4UCS33mYYGJOSPmGw08JsBGm2uPG4=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: STpReNXrEFIZ7XUFUfpz2vhwZidclbKzJhA7KJj87Qo=)
5: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=)
6: ZxAsBDM9cuoyGobJXXvAaIAzrYo.roa (hash: SkB8cFJ0rd32rFH2M62gUtujCyjJXdgWVQ4tyxEgN0s=)
7: fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa (hash: a8q8mr9r17Mfl2XO4auErGCWFnO43pDXqgxu5lyQm8k=)
8: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (hash: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=)
9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8c:3c:82:76:90:21:41:7f:8a:d5:0b:d8:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=f1a88e72f8be0f8a1bd8faa7e7dc7271db35fa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:04:44:3b:e1:aa:f6:f0:4f:4c:75:7a:07:
1f:e3:58:73:b9:da:98:00:7c:fd:2d:0e:48:d2:cb:
b6:20:00:8c:09:ec:c5:21:67:48:ec:b3:cb:ec:a6:
ec:32:c0:57:cc:bb:75:a9:26:1d:f7:d0:4e:85:2f:
86:2e:ab:68:ef:83:34:24:16:cc:59:46:54:ee:72:
20:eb:dc:98:c5:12:21:7b:91:8c:e1:24:00:fe:6d:
30:4b:04:6c:0e:e1:2a:76:39:12:d5:85:23:89:c8:
9a:7a:45:a6:ca:91:de:a0:bf:2c:94:4b:22:19:cb:
2b:a6:a5:71:78:e4:b3:50:5b:78:0f:94:09:d5:2d:
7c:e9:3b:84:10:af:a6:a9:7d:2b:dd:d5:e2:9b:d4:
ec:af:bf:fd:93:c5:40:e6:6d:3b:50:54:19:b0:cc:
f8:3f:69:8e:10:fb:24:e0:cd:db:4d:ee:40:6e:fb:
f9:5f:02:b1:e7:5d:03:41:eb:1a:0d:6f:8b:23:19:
fe:c0:14:e8:42:bc:89:de:80:ff:2f:ab:b0:89:73:
5c:7a:c8:a5:f0:73:7c:fd:6f:00:b0:0e:06:52:32:
2a:80:1f:96:6d:ee:a8:e1:09:75:2e:c5:e4:28:dd:
3f:46:93:80:1a:cc:f2:79:c1:06:aa:aa:42:93:d0:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:8E:72:F8:BE:0F:8A:1B:D8:FA:A7:E7:DC:72:71:DB:35:FA:4D
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3c:a7:98:a3:b1:59:4d:f0:99:25:1a:0e:f0:79:f8:74:4b:
23:7a:a1:0c:f3:22:45:1f:a0:c5:e0:72:9a:b5:b1:3e:ad:81:
97:42:ef:4c:27:01:b8:8c:e7:00:1f:78:30:52:11:2c:7d:cc:
81:54:05:11:03:4e:5f:99:01:ab:a3:65:50:98:85:b5:00:b0:
f9:50:d3:2a:38:22:7b:84:45:8a:88:7c:9b:cb:dc:e6:31:31:
48:1d:d6:03:bd:d1:df:5d:21:b7:09:43:92:ec:d0:27:a5:63:
d4:42:04:19:46:2d:c9:c7:db:07:f4:31:ed:46:1c:f4:36:e5:
49:be:48:1a:02:9d:06:3c:a7:96:77:70:21:39:bf:4a:b6:6e:
37:05:2f:c3:4e:81:d7:35:a8:d3:1e:f6:d0:73:82:e1:0a:b2:
7e:7c:d0:23:55:12:53:40:63:d4:58:b1:45:6d:7f:4c:ac:2d:
c1:3b:20:0b:e1:d7:8c:f1:05:48:b2:38:c2:59:46:19:6c:77:
f9:a7:a5:b9:43:26:12:30:27:12:ff:65:be:11:2e:21:af:0c:
2a:54:c7:09:a0:74:bb:f7:b9:8a:1b:c9:26:15:59:18:2e:69:
1c:45:58:58:24:9b:c6:6a:70:0d:a3:aa:bc:2b:3e:ed:a5:4f:
7b:79:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:05 2025 by rpki-client