Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: 2Xjj0R6+mfgw/bqXL4ZAAwbskUAfqpt/Zrg74hl0Yx0=
Subject key identifier: 61:9C:13:B0:83:3F:07:37:FC:32:3E:39:98:4C:8F:EC:AC:51:0E:ED
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0198526885E7D54D0D3C210239BABFB72656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1648
Signing time: Mon 28 Jul 2025 19:00:38 +0000
Manifest this update: Mon 28 Jul 2025 19:00:38 +0000
Manifest next update: Tue 29 Jul 2025 19:00:38 +0000
Files and hashes: 1: 4xDjMGoR5cxZD0TEt45OTNLuzZ4.roa (hash: aWtnbMWrytraTfwmFZQXH9y0uPlTO0CdQ7LWoLXK164=)
2: J8HqZbweBSBfotj9M3AMH0o24CY.roa (hash: KkFoXwUHnXFgQiJUTdylT6bFXV0tnmXRuocNWtuhH7k=)
3: aXs8DBYHqH16kFI25mAmO1bJxx4.roa (hash: d1LoCC9lmf7ZBBsN52kpeKsNgpbykeADMERL6qdd4Bg=)
4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 9STqgpV7AEvkHx2LkaLon+RuHvAJweSdYkPh2TCTdpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:85:e7:d5:4d:0d:3c:21:02:39:ba:bf:b7:26:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 28 19:00:38 2025 GMT
Not After : Jul 29 19:00:38 2025 GMT
Subject: CN=619c13b0833f0737fc323e39984c8fecac510eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:54:fe:07:ea:6d:6f:0a:f6:5b:9f:2a:49:
e3:3d:60:7d:8a:22:d9:ab:4c:69:57:48:3e:52:e4:
70:5e:9f:fb:c6:56:12:d3:f2:4b:3b:8f:0f:2d:63:
f1:d7:4a:ca:4e:90:0a:17:a7:b2:02:3a:ea:24:57:
ec:e6:b3:d3:7b:85:9c:a0:5c:cc:72:86:cb:a4:90:
80:78:5c:46:de:04:63:d3:6e:99:63:d2:bb:85:d3:
af:9d:ce:43:c5:f2:cd:34:f4:f9:ef:df:d8:6c:82:
cd:43:c5:eb:ba:41:81:d5:d5:ae:56:65:1d:05:43:
87:57:05:e0:1f:17:57:df:35:85:1b:cf:05:e1:7b:
65:3b:fc:f8:a9:f4:39:6c:32:13:28:5e:51:84:da:
be:76:60:ab:c8:95:a9:6b:e3:99:99:0a:5b:dc:38:
05:2a:d6:a0:a1:83:ca:e9:02:5f:33:db:fc:a6:52:
31:01:e1:64:ff:54:74:61:cb:f4:b7:61:98:80:71:
3d:93:6f:40:89:98:f8:b3:6c:84:eb:49:96:80:76:
af:c7:9f:67:92:f3:e8:f9:ab:1b:f8:9d:8e:40:44:
a0:5a:28:b4:05:4a:db:56:19:1f:11:60:20:a7:8b:
5e:88:05:99:94:31:16:26:a5:9f:47:0f:1c:d8:06:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:13:B0:83:3F:07:37:FC:32:3E:39:98:4C:8F:EC:AC:51:0E:ED
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c4:a7:05:f2:ec:af:7d:36:53:ff:bb:32:d4:02:f4:ed:f2:
0d:5e:24:5c:cc:10:69:46:73:58:bd:2b:6f:07:e0:50:49:7e:
40:d3:f9:09:4c:7b:a6:b1:50:4f:35:c7:2c:a0:18:3d:a1:06:
31:0e:2a:6e:42:2b:3c:b0:a2:b0:08:d2:93:02:e6:2c:14:e7:
c3:a6:17:49:a3:f0:85:c0:85:91:c0:ab:99:f5:ad:6d:20:6d:
cf:75:fd:5d:2e:52:9c:e0:12:15:d2:c3:1d:68:ee:29:13:23:
33:3e:61:5e:59:0b:a2:5b:d3:c6:a5:65:eb:50:2b:c3:19:09:
6b:dc:1c:61:7b:d1:a3:e4:13:27:9c:dd:0d:84:fa:81:c5:a0:
dd:ad:ef:05:1b:03:09:8b:c3:81:bd:55:43:9d:f1:75:c8:f6:
1f:d0:ac:a1:47:14:f4:e2:b7:b3:2e:c6:ae:43:0d:c0:6d:ee:
38:04:f0:4b:c8:6b:67:f7:9f:e3:c0:b2:f8:0a:83:aa:a2:43:
0e:24:0d:c0:a6:93:33:2c:44:bb:31:ba:51:f6:5c:0d:1a:09:
b7:ca:c4:5d:d0:ee:bd:94:2e:d3:dc:9c:cd:22:ab:37:44:8d:
3f:6b:84:1b:77:b8:c4:9b:be:9a:1f:7c:b2:f8:9d:50:6c:bc:
12:c9:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:34:31 2025 by rpki-client