Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: 8QtpcPHpiQTu+U3QxZzJPC01KW3cb18K9rkKZNn1n1s=
Subject key identifier: CE:39:64:0A:E0:C1:8D:61:8C:BE:A1:77:10:FE:20:1E:62:32:E9:79
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 0198481BAC06E94E5BA234C63E6C8E6C82F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 19:00:29 +0000
Manifest this update: Sat 26 Jul 2025 19:00:29 +0000
Manifest next update: Sun 27 Jul 2025 19:00:29 +0000
Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=)
2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: iJlm123hh7JnAIEMNz01rjT1J5tqlw3pJ+mz42MSJNs=)
3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:ac:06:e9:4e:5b:a2:34:c6:3e:6c:8e:6c:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Jul 26 19:00:29 2025 GMT
Not After : Jul 27 19:00:29 2025 GMT
Subject: CN=ce39640ae0c18d618cbea17710fe201e6232e979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:e5:94:a3:42:b2:07:d5:97:60:2e:9b:99:
e8:24:4c:55:d2:41:1e:0f:db:10:c7:a7:2c:18:d9:
f2:bf:3b:b0:74:25:fa:0e:86:cd:31:01:6c:48:f8:
5b:51:d7:46:15:b4:32:25:bd:3c:3f:5c:95:db:01:
4b:5d:63:ac:32:05:64:bf:b9:e6:20:fd:06:22:bc:
a5:6f:2a:ea:5a:55:5f:ec:cd:37:6a:f3:4b:e9:6f:
c4:c8:1c:ec:a9:29:89:50:d0:d7:fb:4d:46:45:59:
c3:ae:51:f4:91:e1:0d:25:be:4c:99:22:40:fd:88:
81:fa:18:6c:15:10:4b:a6:59:5d:94:c9:fd:53:a3:
72:cc:53:b5:f0:c2:db:d1:29:73:66:29:33:46:9f:
7f:54:92:40:25:91:df:c9:d6:0a:25:38:c9:e4:b3:
9a:e7:54:73:38:3a:1c:fd:58:73:7c:5d:8d:ae:83:
2f:27:8b:a4:7f:e4:f5:e5:80:bb:14:1f:38:f9:3c:
07:c1:c3:45:c0:af:46:c4:eb:ed:ce:20:19:3e:a6:
9f:04:b8:a0:8e:a1:74:19:67:d1:56:14:33:5d:ad:
04:cc:20:53:e8:36:e6:78:17:74:ca:45:75:be:c9:
2b:e8:c4:7a:9f:ba:ed:cc:98:38:4d:4f:6b:5a:3b:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:64:0A:E0:C1:8D:61:8C:BE:A1:77:10:FE:20:1E:62:32:E9:79
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:7c:4e:6d:bd:57:44:db:f4:ce:60:81:c3:2d:be:c4:0a:
07:b0:30:ef:b2:25:0e:d3:e5:42:a8:d1:95:ff:5e:2f:f0:41:
88:e5:2e:87:ed:4b:c8:50:c1:43:17:85:4d:9c:24:7e:46:df:
98:f9:ef:42:13:1a:dd:8c:9a:61:26:dc:9a:f0:30:fb:35:8a:
94:3d:7a:c2:3e:db:12:e9:78:73:67:8c:de:2e:8e:55:02:02:
ab:3b:54:53:b5:3c:5f:e2:74:84:47:c6:e3:8b:a5:7b:f6:1f:
8e:e5:57:04:e2:20:72:06:66:2e:46:69:03:63:98:6e:5f:9f:
ae:65:ce:db:33:94:5e:3d:85:e6:f2:c7:9e:72:c2:09:93:54:
91:1e:be:09:9a:1b:14:e2:9f:95:15:93:a0:dc:fb:2f:05:97:
d7:cc:6c:e2:0e:ae:4b:96:1c:cc:1e:77:73:00:6f:de:04:f6:
34:85:4f:15:60:45:38:f3:2f:dd:28:b7:21:70:2b:f5:97:72:
d7:ca:87:4d:c3:28:63:d2:09:09:03:ed:06:ee:32:34:4f:2a:
24:c2:e7:3a:5b:15:aa:05:42:30:24:e9:fe:8b:27:c0:21:e3:
b8:f5:47:a9:dc:13:ec:06:e8:ee:ef:8b:4f:21:a6:24:70:38:
94:d3:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:31 2025 by rpki-client