Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: mKlFjouZ6fQjAwf+Hp03e9gLh+gwUrMGrpqFkaJuQLo=
Subject key identifier: EB:3C:30:1C:B8:8A:4A:24:CD:CF:46:44:95:06:13:EE:C3:84:05:0C
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019847ADD70EFE79A5EFC1CC067EB0E127B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1065
Signing time: Sat 26 Jul 2025 17:00:31 +0000
Manifest this update: Sat 26 Jul 2025 17:00:31 +0000
Manifest next update: Sun 27 Jul 2025 17:00:31 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: HadhfS1W/XrYit7OFAlcDXDyvgU97aQIAq1FIwMmf9s=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d7:0e:fe:79:a5:ef:c1:cc:06:7e:b0:e1:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jul 26 17:00:31 2025 GMT
Not After : Jul 27 17:00:31 2025 GMT
Subject: CN=eb3c301cb88a4a24cdcf4644950613eec384050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:0a:b4:b6:b4:a8:24:e7:af:6b:77:4b:dc:
0c:cb:f5:4a:ef:9f:ed:3a:ff:9f:aa:c8:18:0a:67:
e8:e3:16:87:ba:60:c2:d8:f4:a9:81:a7:55:e7:61:
0b:c2:54:a2:71:d2:92:96:0b:26:f3:ef:80:1c:92:
54:29:67:44:24:d6:97:4d:cb:aa:35:58:03:25:c5:
66:02:0f:a1:bf:09:81:c0:f7:a5:84:ef:78:94:60:
f0:63:30:c1:12:9a:ef:47:b1:33:0a:10:ff:e7:d0:
34:27:13:74:4e:cf:d2:1f:2d:74:b0:cd:54:6b:7d:
ee:19:4c:5b:85:e5:d6:5e:b0:27:4c:09:72:8f:96:
53:0a:1a:7c:cc:75:bc:3b:cf:0f:8a:e2:50:a2:30:
af:a4:96:3e:26:cb:12:7b:44:9d:ea:83:ec:bd:b9:
11:0e:29:e6:20:49:ff:87:2a:ac:7f:3c:29:03:5e:
f9:27:e5:a5:0d:dd:3e:95:5b:61:49:31:74:48:32:
79:a8:48:cc:53:0f:18:64:ad:7a:bf:57:26:c6:79:
c1:45:06:9b:88:a9:bf:f6:e9:99:7a:93:a1:49:90:
f5:77:c9:14:86:c6:a7:67:5e:45:dd:64:00:d1:33:
28:e0:38:08:55:cd:2c:a0:c1:db:2b:8a:79:7b:3e:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3C:30:1C:B8:8A:4A:24:CD:CF:46:44:95:06:13:EE:C3:84:05:0C
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:a1:86:08:4f:a0:2d:8f:44:61:86:45:51:8f:8c:67:e0:
84:ce:05:40:83:99:23:35:b1:d0:8a:63:13:0d:62:c9:be:4b:
a2:09:98:8b:be:e2:52:96:f0:e8:70:58:33:dd:38:a8:49:e0:
af:da:46:39:f5:21:cd:5c:17:6a:ff:75:19:9c:1c:69:6d:c9:
11:cb:9a:ae:d6:da:63:e3:af:5b:60:91:f6:86:d4:8e:8a:d9:
d5:dd:80:29:29:ad:96:02:db:d2:64:62:f3:4d:4f:cb:bf:db:
66:cc:a2:4c:3e:ff:f2:f8:4f:71:19:0f:7e:f3:91:95:c7:a4:
d2:86:3d:e4:c4:ea:76:d4:dc:f4:97:42:66:04:cb:e8:ef:d0:
7c:4f:c4:40:c3:6e:c6:9a:89:fd:a0:67:a4:b6:cd:ad:26:fd:
45:eb:03:55:a7:31:c5:e2:07:d6:81:e8:57:7c:87:37:90:cb:
97:b4:25:47:0e:97:be:5f:c3:f6:22:a2:34:9c:e3:2c:b1:b9:
e3:2d:cb:6b:52:df:14:68:04:26:5d:be:ca:bb:38:54:07:e3:
b0:ad:04:ad:ae:0f:8a:25:46:c5:48:a6:33:57:6b:50:61:78:
7c:e4:ea:60:a2:6a:7a:3b:00:48:c8:bb:33:89:a8:ca:7f:e5:
b5:00:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:42 2025 by rpki-client