Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: Z5diTMBZwvxy008EjgOXEHAq85qtL1L0IXJbxDSYXyE=
Subject key identifier: 71:7B:91:63:7B:CC:1F:B6:70:E4:47:44:DD:8B:23:45:24:9D:C0:40
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 0198D705878DBA971AE4933AA6F0B26D8BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 7E
Signing time: Sat 23 Aug 2025 13:02:00 +0000
Manifest this update: Sat 23 Aug 2025 13:02:00 +0000
Manifest next update: Sun 24 Aug 2025 13:02:00 +0000
Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: coETbJEOiijDGFCm96S/zsNK8PEvxLh80rP3Gq0oJCI=)
3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:87:8d:ba:97:1a:e4:93:3a:a6:f0:b2:6d:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Aug 23 13:02:00 2025 GMT
Not After : Aug 24 13:02:00 2025 GMT
Subject: CN=717b91637bcc1fb670e44744dd8b2345249dc040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:8d:e5:94:f0:96:69:3f:80:ab:01:c4:9d:
8d:b5:c1:c0:7f:b7:88:d7:f2:b4:59:1e:a2:f3:20:
08:14:2e:05:84:c6:58:2b:ec:30:a8:6e:06:e8:69:
19:aa:2a:4b:a1:58:5d:0b:64:d0:db:81:59:23:f2:
bd:95:2f:a5:4d:77:80:8c:53:84:f9:28:a5:d2:2f:
ab:12:15:e7:0f:1f:d8:a5:e6:3f:64:56:49:48:03:
d4:e7:07:c4:d5:66:f9:ef:1e:0e:09:3a:fa:7a:a5:
aa:1e:80:31:11:b7:42:1f:45:74:f5:2c:71:c2:86:
bd:1e:74:ec:ea:9e:ea:9a:f5:89:b9:10:b5:ed:a0:
bb:06:d0:9b:74:1f:9b:19:b7:df:bd:0c:98:70:16:
30:bf:90:d7:c8:74:ef:6f:17:9b:6d:d4:3c:08:78:
cc:39:55:84:86:be:d9:87:00:d5:1f:29:11:84:1b:
7c:b2:31:71:44:67:cc:2c:09:c9:64:93:2e:e7:38:
f6:2b:1d:e0:12:f8:40:ac:01:ea:87:12:d7:22:8f:
1b:d9:9e:ef:8e:c7:e7:02:a5:c1:2a:76:9d:4b:1a:
c4:3e:dc:60:15:f9:f0:32:14:4b:b3:99:62:79:8a:
03:e6:af:43:78:ee:ca:52:1f:9d:db:af:72:c2:91:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:91:63:7B:CC:1F:B6:70:E4:47:44:DD:8B:23:45:24:9D:C0:40
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bb:ff:8c:90:e5:ca:6c:4f:89:a2:b9:59:2b:20:6f:94:2f:
f2:38:8a:d5:f7:5e:8b:52:41:9f:3e:63:eb:c0:19:20:b4:3e:
24:75:10:74:65:c9:4d:de:be:18:eb:0d:24:27:29:ae:6e:ad:
14:3d:67:ca:09:be:89:58:ca:c5:27:df:e8:43:e3:61:aa:95:
96:d1:d7:55:b3:63:d0:5c:a9:b7:94:9c:6d:7e:e0:e6:94:3a:
55:39:7c:20:6f:77:8d:93:40:93:f1:a3:e9:94:bb:5e:3e:0d:
53:76:fe:ae:39:8d:5d:51:48:72:04:24:48:97:6a:f1:3c:19:
66:bc:03:4b:dd:76:61:46:c2:4c:67:52:11:58:cb:fd:bf:50:
09:28:64:ed:87:4a:14:c3:ce:8d:bd:17:2d:82:6c:7f:05:04:
b7:aa:e3:01:55:68:47:fc:2d:57:89:59:57:44:b6:c0:2b:04:
51:46:08:08:54:ec:33:3c:1c:cb:40:9f:32:a4:62:19:54:11:
43:96:c8:b9:26:aa:3f:a3:5e:1e:ab:ca:8b:9f:f6:a9:a9:7f:
5e:bb:60:5c:a9:d0:cc:cd:24:4b:56:e9:57:6e:1a:5e:de:d5:
49:e0:90:38:39:cf:9e:cc:a8:f6:bc:e0:4e:e4:69:9d:d8:43:
f0:78:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:33 2025 by rpki-client