
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier: kasYae4CCyURthvmrN1T0jOW5tezLR0qhZDwgnj4iD0=
Subject key identifier: DB:05:A5:B6:19:5B:A0:7D:E6:80:EF:DC:F8:8D:69:2F:98:C1:21:83
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 01984A0A13FEDF978687E05277E2156687FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:30 +0000
Manifest this update: Sun 27 Jul 2025 04:00:30 +0000
Manifest next update: Mon 28 Jul 2025 04:00:30 +0000
Files and hashes: 1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: NszoC2Z+DDARP9xxR4iiq59Z8qeta5gW61bSe7q2Ybc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:13:fe:df:97:86:87:e0:52:77:e2:15:66:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Jul 27 04:00:30 2025 GMT
Not After : Jul 28 04:00:30 2025 GMT
Subject: CN=db05a5b6195ba07de680efdcf88d692f98c12183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cf:26:bd:93:d2:80:c1:df:4b:e3:10:f3:e9:
e7:bc:38:33:aa:27:13:cd:70:63:d6:c6:78:1c:ca:
26:e7:fe:fb:ea:e4:0f:05:15:5c:38:7c:9f:e4:f1:
16:7e:16:0d:c4:7e:4b:16:6a:a0:87:c2:d1:6a:77:
c7:6f:8a:27:02:81:1f:5a:dd:61:59:9c:2a:e8:2b:
7f:46:6e:47:78:f5:93:c9:e0:12:9b:e1:6b:33:09:
bd:46:64:c7:6f:77:73:ad:45:b1:60:0a:7a:b8:e4:
df:3f:d1:a8:b2:ce:8c:bd:80:12:35:ae:20:54:4d:
05:45:1d:8e:67:79:83:4f:58:37:af:09:10:ce:65:
04:8c:78:3c:39:1a:f3:09:ce:c1:12:d2:03:f2:df:
c8:66:06:35:12:63:63:1e:cc:77:a6:de:fa:e4:d4:
36:6a:d0:eb:25:cc:8a:82:7f:b7:2d:7a:fc:d8:fa:
fb:ff:b7:1e:29:d3:f6:c2:2d:c7:76:77:98:bb:f6:
ec:8d:f7:06:05:75:3b:62:1b:94:69:ac:d7:94:8a:
a2:e9:f3:f1:01:0d:90:68:74:9f:07:27:51:c3:85:
d8:a3:31:64:09:1b:71:a3:44:98:84:92:fd:4e:e8:
f2:97:30:66:2d:44:14:4e:e2:d3:7e:70:75:aa:e4:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:A5:B6:19:5B:A0:7D:E6:80:EF:DC:F8:8D:69:2F:98:C1:21:83
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3f:e1:cb:df:a7:e0:11:93:13:3b:bb:4f:3a:a9:97:9a:28:
dd:ad:62:9c:13:52:1d:27:a0:7a:4e:64:92:fe:3d:7c:6f:3b:
48:aa:25:38:1e:c9:8f:b6:fc:8b:4d:34:43:9d:da:df:91:54:
3c:e3:e8:fc:96:1f:08:62:32:bd:b8:54:f9:b8:5b:de:dc:82:
54:72:83:e3:3d:43:56:58:10:2c:e1:8f:7f:38:ed:57:6b:2b:
ed:04:56:c5:a7:c2:aa:6a:84:07:6a:5b:0a:bc:a8:c7:2e:79:
a3:e1:f7:0b:d2:f9:92:7c:71:e5:52:75:8c:c9:8d:0b:eb:c5:
30:7b:97:4d:7b:b2:91:2c:64:95:00:c5:01:b7:d8:8d:29:ff:
a2:0d:3d:85:4a:d6:5d:62:07:34:98:9b:be:0d:9e:13:cf:85:
e7:5d:d7:9c:2f:e5:d5:89:bd:58:65:30:f7:49:15:69:b7:f8:
28:8c:b7:2e:ea:d0:b1:76:04:d9:4f:d4:f2:3b:46:d4:ad:c2:
e3:62:c4:73:2f:fe:62:44:58:74:ef:65:75:1d:12:64:7b:15:
3e:81:af:2c:cf:79:21:32:5d:35:da:6e:45:ce:c5:82:5f:aa:
ab:26:42:40:b8:92:cd:11:28:63:bb:f5:6a:75:89:02:cb:ce:
cc:fa:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:31:04 2025 by rpki-client