Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: aCGLYDC/jTDm01BwAHORndcyC1HrdxfQShi1TDNspkk=
Subject key identifier: C0:15:AB:F8:8A:1E:A3:D8:C6:A8:02:57:A2:BA:F3:8F:D7:4C:A7:88
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 019855DFB10416E804C728CA95DD9FB8CF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 11:09:39 +0000
Manifest this update: Tue 29 Jul 2025 11:09:39 +0000
Manifest next update: Wed 30 Jul 2025 11:09:39 +0000
Files and hashes: 1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: J7mHQ9fv37ZQWmNtjo2twlvPhtY/7XC3zjXI3j6nb7w=)
4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:b1:04:16:e8:04:c7:28:ca:95:dd:9f:b8:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Jul 29 11:09:39 2025 GMT
Not After : Jul 30 11:09:39 2025 GMT
Subject: CN=c015abf88a1ea3d8c6a80257a2baf38fd74ca788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:1e:92:c9:f0:23:6f:69:a1:07:23:87:65:
fe:9a:e1:0a:61:4e:b5:f3:8e:2a:eb:34:65:10:40:
38:41:9c:51:c1:f0:02:ff:58:9e:bc:1c:20:8f:29:
60:e8:fc:53:fe:d1:dc:57:27:e7:d3:27:8d:b2:5b:
5c:49:7c:f6:b6:72:15:16:81:fb:ce:c6:2f:53:88:
d4:ee:0e:dc:29:c9:1a:94:b9:61:76:6d:77:85:f9:
fe:60:da:6e:20:dd:6a:ee:e9:b2:25:00:69:e2:30:
3d:f9:1c:60:b1:20:09:68:f7:20:e0:44:d8:20:a4:
92:62:f0:cf:e5:36:21:4a:73:4a:d0:3e:ef:98:ed:
32:1c:da:f4:2a:dc:84:f3:5d:20:be:d7:8e:c2:e5:
54:37:04:79:a4:e3:8e:03:bd:f3:ac:ce:2c:a8:9b:
bb:ee:55:a9:4a:37:14:87:19:17:fb:70:80:4b:23:
0c:a4:a0:61:9e:34:51:6a:90:7f:f0:04:79:cc:ec:
78:91:fa:b4:ee:c2:98:b1:2d:32:07:3b:c0:20:dc:
d8:3f:0c:28:e4:53:ac:76:21:16:49:ca:c7:e9:b0:
3e:49:07:8e:22:69:9d:7c:c3:31:a9:77:f2:7f:4c:
1c:a6:1e:79:f8:59:c0:0a:48:40:0f:e0:b3:f3:b1:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:AB:F8:8A:1E:A3:D8:C6:A8:02:57:A2:BA:F3:8F:D7:4C:A7:88
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:71:58:86:f1:6b:52:9c:11:31:1e:7e:e2:73:6e:3a:72:
8a:6a:69:e8:21:98:76:94:7a:dc:56:9b:45:46:7e:53:0c:ad:
0d:9a:01:a3:fb:05:31:5a:6f:23:81:ac:01:6a:06:ba:ce:75:
6f:93:5b:35:58:74:bc:69:5b:85:1d:9b:2a:7f:00:62:78:c5:
83:6c:70:82:74:10:8f:8a:d2:5c:da:44:82:2a:77:50:39:04:
92:c1:d7:42:f8:25:75:3f:95:86:62:1e:0f:f6:fa:e1:0e:ae:
64:1e:46:4e:92:a2:79:f7:26:7a:5b:d5:04:f7:67:3b:9d:31:
0a:55:0c:8c:d1:4c:4c:e2:67:dc:03:74:c6:8e:11:ff:65:31:
cf:3e:e7:c3:bb:55:b9:f6:9d:be:96:ea:5c:11:d4:cd:1d:dc:
8f:89:ec:07:38:95:53:c6:05:57:74:da:7f:3e:60:0d:37:69:
ad:4e:cf:c7:e9:75:d6:d0:9a:e3:42:41:3a:f9:ad:8e:95:ab:
73:11:92:42:16:eb:86:37:72:81:09:f2:fe:85:1e:51:64:7d:
02:e4:f4:0a:c4:4b:89:cc:a8:d6:b6:00:ef:9f:10:2a:e8:bc:
da:64:27:ed:2c:93:8f:db:a3:d2:dc:a9:63:34:7e:e2:92:f8:
26:4c:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:28:56 2025 by rpki-client