Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: 6cYMPHVUMBYnPjYfLKNikrdCt6c8pUg2GHgPLupq4/s=
Subject key identifier: D7:C4:CE:F7:30:F9:ED:8C:72:E8:42:7D:6A:90:2E:61:AA:C4:6E:94
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 019849668183DA3BDEB761650188053FFB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 115D
Signing time: Sun 27 Jul 2025 01:01:51 +0000
Manifest this update: Sun 27 Jul 2025 01:01:51 +0000
Manifest next update: Mon 28 Jul 2025 01:01:51 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: C6zO/jxJ0819Sa/noYAAIESygHbQETHom7s8/WoUlJQ=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:81:83:da:3b:de:b7:61:65:01:88:05:3f:fb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Jul 27 01:01:51 2025 GMT
Not After : Jul 28 01:01:51 2025 GMT
Subject: CN=d7c4cef730f9ed8c72e8427d6a902e61aac46e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:99:06:55:75:1e:7b:ed:b6:a6:10:bd:be:
69:23:b4:38:24:bb:66:68:e5:66:5b:50:35:05:f9:
4a:19:6f:14:8a:2c:7b:3d:95:8a:b6:de:31:38:85:
1f:f3:4f:ce:b9:b7:9b:a7:dd:2c:10:2e:13:de:25:
5b:45:51:dd:b2:59:c3:bd:da:6b:2b:f7:b7:72:25:
d4:d2:1f:24:9e:fe:44:0d:50:41:28:a0:8a:7e:0d:
d2:76:3c:7d:eb:ea:80:66:6b:57:02:bd:72:07:80:
9f:82:85:0c:1e:db:13:c9:21:6e:52:6b:6f:66:a0:
6d:56:bb:de:ff:bb:c6:b7:3e:2f:0c:ea:c5:c1:dd:
a4:5c:33:e2:d0:cb:04:26:f7:22:ec:be:a8:85:17:
3d:a3:fe:ad:df:27:10:1a:07:9d:78:8e:42:f9:08:
70:50:97:a4:32:d3:43:15:bf:d4:0f:21:7d:27:7d:
26:38:f5:7b:e2:e9:f7:3f:8b:76:6e:52:a4:bc:6a:
f0:e0:7b:04:3a:29:47:9d:5e:b5:0d:ca:90:37:bc:
e0:06:56:bb:d7:0e:43:88:2d:f7:cd:f5:e9:89:4e:
fe:8e:7c:8f:fe:30:35:e7:8a:69:34:66:84:89:60:
5e:56:9d:de:79:e6:47:63:49:a9:f8:32:77:28:72:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:CE:F7:30:F9:ED:8C:72:E8:42:7D:6A:90:2E:61:AA:C4:6E:94
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d9:20:95:03:51:87:f8:0f:f8:d2:71:db:32:34:c8:eb:31:
de:4b:29:f3:28:25:da:7b:91:fe:b0:f8:67:b1:ea:0b:20:23:
6a:70:9b:f4:b3:8b:67:42:d1:f6:ee:2f:c5:cb:d6:52:cd:35:
fa:68:bc:bd:ab:43:9c:88:73:96:4c:86:3b:00:64:82:38:a5:
9a:6e:07:5b:f4:9d:75:e3:64:d9:f6:5d:e6:0c:f0:68:f0:2c:
b8:7b:d2:17:74:1c:50:f2:86:ef:d3:16:b5:2c:96:6f:a4:6d:
be:13:26:8c:ea:5d:a2:67:58:68:30:f4:ff:f7:17:e4:7c:70:
22:c4:f4:40:92:37:d3:6a:25:56:2f:a0:52:26:6f:06:33:84:
c4:46:02:31:1e:33:e7:2e:9c:30:f0:67:96:7e:49:42:34:b2:
38:7a:09:3f:e9:91:eb:7b:21:21:9d:80:5f:4a:9c:44:84:3a:
9f:25:f3:3b:17:90:3e:6f:fb:c1:d0:8c:89:44:0e:50:6d:a1:
98:d2:88:e7:59:15:2e:f4:98:28:be:6b:8e:54:04:18:5e:c4:
34:91:85:58:49:e2:35:1f:c7:8d:b8:c7:26:d4:81:9a:33:02:
f4:26:a4:cd:de:03:ed:10:6d:a4:de:93:a3:c0:78:44:00:49:
1a:30:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:47:34 2025 by rpki-client