Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: cwUGfckaFi2DG9fhNZFOV6NLRsm3CzaaVrZYQNPAVcY=
Subject key identifier: 43:6E:82:AE:88:DC:7F:3B:88:E1:2C:80:D8:AE:D0:F4:B9:5C:F3:F8
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019853E8B7B14DC40A7AAA486E203A5BE224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0AB7
Signing time: Tue 29 Jul 2025 02:00:16 +0000
Manifest this update: Tue 29 Jul 2025 02:00:16 +0000
Manifest next update: Wed 30 Jul 2025 02:00:16 +0000
Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=)
2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: pdA1I5y51djnmlP8jFpVQCNRAoLnh5DVfmflfMZY32o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b7:b1:4d:c4:0a:7a:aa:48:6e:20:3a:5b:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Jul 29 02:00:16 2025 GMT
Not After : Jul 30 02:00:16 2025 GMT
Subject: CN=436e82ae88dc7f3b88e12c80d8aed0f4b95cf3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:aa:55:23:a8:86:f6:aa:a6:12:94:aa:4d:
9a:f7:c3:9d:1f:60:bf:d0:c7:ed:09:cd:28:bd:52:
06:fa:b8:a7:12:f3:8c:4a:a6:9d:1c:2f:00:76:d9:
61:b7:27:b9:a2:b0:b9:e8:18:b1:fe:11:64:cc:54:
e4:75:73:67:e7:a3:eb:ef:5e:4d:52:1d:30:e6:d5:
e2:8a:6d:f7:50:b6:29:15:c7:7b:1c:93:f2:50:d4:
26:82:c8:5a:09:ec:0f:0e:0a:11:ff:9f:3b:11:72:
55:1b:91:ff:80:c2:53:61:5a:1b:b2:f7:cd:ae:5c:
c8:f9:bf:52:56:5b:b6:67:77:0f:a1:7a:be:f1:da:
bf:21:aa:99:81:8a:d2:db:d9:09:16:9a:bb:a6:f2:
1d:e7:4a:be:1e:a4:37:7e:5d:62:24:01:b0:c3:df:
b5:fa:db:14:c6:1c:c2:33:d3:38:2f:c8:36:fa:ff:
bd:54:88:f1:80:b9:38:c3:f7:99:4f:6b:62:97:82:
67:a1:c7:3e:08:7e:64:0c:96:0a:20:bb:d1:d0:6e:
d0:ae:c9:6e:cb:84:52:f5:ae:4f:21:a0:f1:1d:3a:
b9:7d:e5:71:f4:4d:3c:00:34:4d:bb:0e:8b:2b:d7:
5f:50:8e:39:36:d4:3a:3e:0c:79:23:d9:e4:87:12:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6E:82:AE:88:DC:7F:3B:88:E1:2C:80:D8:AE:D0:F4:B9:5C:F3:F8
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:ad:d6:95:27:42:b7:a8:5e:ca:b4:7f:92:0c:c8:54:f2:
8f:47:a8:2c:29:6a:32:11:77:f2:86:78:48:43:e5:14:27:5a:
5e:47:5b:b0:d4:df:ae:0b:42:58:00:b7:16:e2:0f:05:3e:c1:
ca:3a:7c:44:f9:21:67:55:1f:38:be:87:0b:a1:47:10:4a:4b:
06:85:38:66:48:92:a0:ef:0a:2b:a5:a7:9d:ae:82:a4:47:45:
e2:04:9b:0d:be:b2:0e:05:90:52:fe:dc:23:72:54:68:32:7e:
b3:5e:85:68:6e:e5:16:2b:25:fa:2c:be:1a:28:ed:0e:b2:e4:
3b:80:0f:fb:47:d2:15:19:cf:d0:27:ab:10:82:cf:32:71:ba:
5c:c4:f6:1d:dd:39:29:ed:bc:f1:e1:3f:38:3e:11:1d:92:5c:
de:4f:26:24:cc:db:d0:fb:92:1d:8d:0c:c1:53:e4:2c:98:42:
46:3c:82:6d:46:c2:00:8b:4e:33:44:14:38:2c:9e:3f:c9:78:
d2:7b:4c:23:0a:e1:c6:5e:cb:35:57:f7:37:f2:08:e1:89:9b:
46:84:57:d5:85:a9:a4:25:ce:d0:c3:40:90:8c:3e:89:ec:e3:
af:6e:c0:66:2e:c2:c3:93:0c:5a:41:d5:65:db:2b:57:1a:c4:
7e:d8:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:01:43 2025 by rpki-client