Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: YmO2w/1Y+8RXQGdyl7sGjr4/eWnBaJkjv79sl/Olog0=
Subject key identifier: D8:EC:6B:9F:F5:D8:70:C0:0A:3E:26:88:74:81:B4:45:F8:1A:18:A3
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01984852C790BA7D3865D3923C9422F621E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 20:00:41 +0000
Manifest this update: Sat 26 Jul 2025 20:00:41 +0000
Manifest next update: Sun 27 Jul 2025 20:00:41 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: ERe5qsD9IxktTETJz5NUXcrAv00ep3x4mGznSP8/hZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:c7:90:ba:7d:38:65:d3:92:3c:94:22:f6:21:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Jul 26 20:00:41 2025 GMT
Not After : Jul 27 20:00:41 2025 GMT
Subject: CN=d8ec6b9ff5d870c00a3e26887481b445f81a18a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:dc:2e:3a:d4:7a:ad:95:da:c2:be:a6:34:
7a:39:fe:79:0d:cf:01:5d:af:9a:8a:7e:73:b1:a6:
30:71:e5:f4:6e:f4:28:36:8b:b6:0a:c9:82:cb:bc:
c2:5e:51:c8:96:89:fc:0a:9d:72:a3:20:29:16:10:
52:48:44:dc:95:8e:16:9a:e8:59:da:9d:0d:f5:bb:
99:2c:fe:24:3e:79:30:25:41:cb:43:32:6c:b5:e5:
12:18:38:70:49:c6:a2:73:9a:49:d7:d0:f5:9b:12:
6b:2d:ac:bc:ee:ac:61:da:12:2b:1a:1b:3f:6c:78:
d4:0a:97:29:43:eb:91:51:41:8f:71:28:3b:42:59:
71:b9:47:74:98:51:c7:44:bd:6f:20:a8:93:26:0d:
68:ca:66:2e:56:bf:98:b1:ed:df:96:1e:7f:03:3a:
6f:f6:fa:f5:cc:3a:a7:0b:92:91:06:42:ba:65:67:
12:23:d1:98:60:a3:94:40:0d:b4:0a:a6:1e:07:54:
98:6a:c3:84:64:0e:b9:92:8c:ec:ea:04:4f:15:35:
21:b0:ba:d3:1e:34:a5:33:d5:21:c5:f7:5b:37:c3:
69:73:91:c8:36:d5:7c:9f:f9:a9:40:a2:65:3d:bf:
a4:5b:e4:d2:a1:0d:1f:3a:86:5d:dc:84:66:89:d9:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:6B:9F:F5:D8:70:C0:0A:3E:26:88:74:81:B4:45:F8:1A:18:A3
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:f1:2a:2c:53:eb:c7:d2:4d:76:dd:86:78:68:c8:8e:98:aa:
74:37:37:51:d5:ed:9e:f3:bc:96:5a:2e:15:06:23:88:81:7b:
f2:73:79:6e:2c:c0:af:01:61:92:1b:b2:b3:1a:11:d4:9a:88:
c7:2c:26:64:29:b1:cb:04:3b:a8:08:4d:28:f2:e9:d7:75:1e:
1b:ce:e4:3c:12:39:ea:87:53:4e:7c:f8:6e:b2:9b:92:1f:62:
c9:69:31:1e:6d:06:99:e4:f2:e9:fa:f8:cc:8b:00:5b:10:54:
dd:6c:a7:7c:44:4e:cb:33:22:9e:70:76:74:73:7d:45:d5:19:
1d:5e:04:33:7d:bb:76:77:07:8e:23:a6:ef:5f:58:80:16:c1:
92:c3:6c:d4:58:bd:c0:60:91:c5:a9:5a:66:a5:23:d0:c5:ac:
a6:22:d8:59:71:39:36:d9:63:db:49:c8:2b:70:c2:42:ab:4e:
99:51:47:47:8f:b9:b6:f0:86:c2:3e:21:5a:66:15:8e:b3:d5:
00:cf:bf:a0:c2:4f:16:8b:32:ea:8f:ea:46:d2:01:be:2d:77:
82:56:e3:2c:86:74:9d:28:bd:cb:6e:f1:a7:a7:28:08:28:7c:
55:78:5c:16:06:bc:a3:13:aa:79:42:62:42:84:dc:3e:27:36:
dc:af:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:35 2025 by rpki-client