Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File: JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier: Qs8E0EyOrxwWxILBZXR0bZC7PeLg9ykigMB/uFIq84U=
Subject key identifier: A3:4D:D6:ED:70:A2:0D:EF:C7:5F:9D:BA:0D:D8:41:96:E3:22:DD:D3
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 01983795A7A752BCD6BD1C2EF859282EE816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number: 154F
Signing time: Wed 23 Jul 2025 14:00:11 +0000
Manifest this update: Wed 23 Jul 2025 14:00:11 +0000
Manifest next update: Thu 24 Jul 2025 14:00:11 +0000
Files and hashes: 1: HL0tpswU2gQezd0-x9ZWDdfR-RY.roa (hash: NAIPlF1KgdG7sggbmAwv2GRB6aTgtE/arOeqKYJF690=)
2: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: qOHOrSA3N3a4jBvgJOJ0t10L5/rkKYjAeBjVhEZt3Fk=)
3: X5-jl_Od0mEO_dSg7rALYkevjoQ.roa (hash: xqc4fnPLjvYYKZxEv5pbNLPSZEhrMf7SnWN3fQ6sCO8=)
4: ljF5u-YRkQFhR1-JzkqgY4rX8fg.roa (hash: yARJg/r5KzAJTCBC6Aa8YbBreZ5SqvZOXFrSvclMQ38=)
5: s_QDIrLshBQNlu6RPwCemGYvy74.roa (hash: 6Y18bq+vtApdDZHTDEQgo5JwDFt4pJR0lVY1yqjzjsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:95:a7:a7:52:bc:d6:bd:1c:2e:f8:59:28:2e:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Jul 23 14:00:11 2025 GMT
Not After : Jul 24 14:00:11 2025 GMT
Subject: CN=a34dd6ed70a20defc75f9dba0dd84196e322ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:b7:0c:0a:4a:f8:a8:e0:01:8d:dd:5c:f1:
2a:c8:08:01:d1:3d:49:61:1f:eb:95:2f:e8:fe:4a:
30:c5:8c:2b:f0:92:78:77:68:dc:34:ec:de:26:b3:
96:7f:5a:25:46:0f:10:40:81:3b:05:09:3d:d2:fd:
8e:d1:c5:31:96:1d:cd:86:21:61:c1:38:c2:79:ff:
ae:cd:5b:f9:55:9d:75:c3:f6:a2:28:e7:73:91:d4:
cf:78:ca:7f:a1:a6:a1:c2:10:83:5c:c2:9d:e3:5a:
c0:86:6e:48:7c:54:d5:f5:53:6f:26:32:e0:4e:af:
49:a4:d7:cf:17:52:56:2b:a1:1c:3b:11:0c:d4:67:
a5:83:d5:da:b6:1e:6f:c2:95:5f:9b:16:6e:a6:6d:
84:4c:7d:3d:ea:cb:d6:59:91:fa:f9:d4:53:cd:2b:
c9:9a:d3:dd:56:05:ce:f1:c5:c7:3e:d8:e3:8f:ca:
ba:45:a6:2f:a1:d2:ee:0a:56:5e:eb:a0:db:f5:85:
c9:93:0d:34:37:8e:8b:d0:f2:75:d1:e3:99:79:c1:
2b:21:03:19:d4:73:ce:e3:3a:c4:9e:73:9c:f7:77:
74:6c:ca:c0:cd:e7:5d:14:67:f2:e4:79:77:d9:a2:
66:61:63:d1:b5:eb:b9:25:de:cc:e3:ae:b9:10:85:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4D:D6:ED:70:A2:0D:EF:C7:5F:9D:BA:0D:D8:41:96:E3:22:DD:D3
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d2:15:c5:40:7f:a1:96:b5:d3:4a:f9:e5:4b:ed:d8:ff:4a:
9d:60:54:d3:f8:1c:34:f2:ee:da:4a:b1:49:5d:54:5e:ac:7e:
52:3c:cf:52:db:3b:40:a1:42:70:2f:78:3e:60:d7:a3:4d:3a:
ca:2c:55:69:4c:f9:64:1c:61:53:b5:fb:5c:d0:d9:ea:14:2e:
be:17:36:4b:97:fc:8d:68:78:d0:87:4e:11:dd:c9:01:71:0d:
b8:21:58:3c:5f:3c:03:25:3f:8a:4e:59:56:47:76:35:a1:df:
03:93:8b:69:0a:7f:87:81:7a:13:b9:d2:d2:d0:1b:02:11:44:
72:38:02:2f:58:da:1e:49:55:fa:43:16:69:13:3b:e1:fe:34:
2f:62:da:96:b6:46:31:53:ce:a6:bb:20:34:44:a5:ea:00:42:
17:01:4a:4b:93:7c:d6:0a:fa:9e:36:22:74:84:53:43:12:54:
ea:4c:4d:13:7b:4e:13:1b:07:96:42:f6:80:97:72:d8:47:fd:
5d:33:b1:30:ad:5c:20:e9:85:4b:32:30:45:25:ff:61:00:07:
62:e7:ac:84:a1:af:4d:5d:15:1e:d5:82:99:a0:f1:6f:10:cf:
10:26:0f:0c:be:7b:79:82:82:37:97:6a:55:5e:55:0b:bc:b6:
70:bb:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:26 2025 by rpki-client