Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: JxE6j9kGw1cy5F17wVb2Vvi0LkPXr150Zi2lhFEqKj8=
Subject key identifier: 25:BB:13:D8:F9:68:51:D9:F6:26:E8:14:EA:71:4D:85:EB:DE:B4:77
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 0197B70F06EAB509AD912337B7062E5E2911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: C4+dOflaTDvdxiYHA65ILlEwOgOBi2Kq/RPlZ2z41x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:06:ea:b5:09:ad:91:23:37:b7:06:2e:5e:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=25bb13d8f96851d9f626e814ea714d85ebdeb477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:6a:77:af:52:cc:2d:66:16:50:33:6a:05:
21:8f:9c:2c:27:cd:1b:17:20:4a:9b:34:cd:bb:23:
6e:04:9f:1f:0c:71:03:74:07:e4:ea:25:00:f0:cb:
09:83:ae:65:98:83:8a:52:4a:dd:5d:1d:9e:e4:72:
cb:0a:dc:bc:1b:92:46:b8:fa:60:1f:ee:d5:7b:05:
0f:50:39:de:d9:1f:2f:17:c2:3c:09:3e:6e:6b:a9:
3e:53:54:1a:3c:0b:80:2c:02:1d:36:e2:c6:ac:f9:
54:ee:79:01:3b:d5:de:ad:63:a3:be:96:8e:03:8e:
e7:02:36:dd:18:bc:68:9a:61:64:64:a7:78:08:72:
44:73:55:e0:0b:6c:78:a9:37:9f:6f:02:0e:40:4b:
63:b5:2b:1c:ef:04:37:ac:e3:50:27:5c:60:d3:6b:
48:94:3e:cd:bc:a2:c4:41:73:d5:23:d5:d3:77:eb:
50:73:be:1d:c9:8f:9a:f5:1b:b3:7b:9f:43:e3:be:
44:5b:33:89:87:9b:70:16:68:4c:67:90:e1:f1:c5:
8b:48:6b:09:2b:20:23:ad:a3:83:16:f2:72:a6:1a:
90:32:9f:e6:ff:c9:9f:d3:06:d0:ba:a7:45:28:c1:
38:53:27:a7:e9:1f:1c:ff:c6:7e:9c:32:f4:1c:f9:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:13:D8:F9:68:51:D9:F6:26:E8:14:EA:71:4D:85:EB:DE:B4:77
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:87:86:36:a4:15:7d:ac:f3:60:98:11:df:26:50:9e:86:
ce:9a:c6:79:33:c8:f1:7e:20:3d:34:d6:38:a7:70:2d:ff:0b:
ac:34:32:bb:89:e4:d4:c2:9f:2f:40:55:16:56:d9:58:e3:48:
33:3d:85:e5:8e:31:cf:3f:c3:3d:73:de:39:e0:d4:d9:33:1a:
36:72:72:ff:db:b8:a5:22:00:da:9f:cc:fe:b3:11:82:35:0d:
3e:0c:cf:c1:c3:bf:fd:6e:41:41:3a:77:a0:fd:0b:c6:8e:e3:
db:9c:f1:94:9d:6a:b3:2f:3e:b0:75:ce:66:64:75:16:74:b4:
64:98:f4:66:e0:88:a6:89:50:e9:18:47:b5:17:cc:79:59:f0:
18:b0:6c:5d:2b:a1:f9:5f:62:65:a4:12:62:4b:a3:cb:11:24:
a7:c6:3d:55:a9:e6:15:35:e8:77:46:76:41:9d:74:cb:6e:10:
ec:1f:8d:a9:1e:8c:f9:f5:85:a5:77:82:44:eb:2f:59:0c:71:
a0:69:b7:e1:21:c3:26:32:7b:37:84:fa:7e:66:d3:bd:a5:00:
66:9d:a0:60:96:8b:3e:b5:b5:f7:19:95:2a:a2:d5:4e:69:5e:
c7:e5:73:f8:fa:d6:c0:a5:a3:29:b3:33:47:8a:0f:b5:ab:68:
22:d5:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:39 2025 by rpki-client