Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File: Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier: TGb97dTkujgLaFxS4eCpWK3fW0JsengrEAKhyUNfa10=
Subject key identifier: 5F:4F:09:53:BA:E5:55:76:B2:0C:88:0C:07:F0:E7:74:C8:70:9B:3B
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial: 01984965658EAF8993588829974F78B97CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:38 +0000
Manifest this update: Sun 27 Jul 2025 01:00:38 +0000
Manifest next update: Mon 28 Jul 2025 01:00:38 +0000
Files and hashes: 1: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (hash: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=)
2: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: UFyYKJIKZyhHkAzb2NOfQyOI2DJcxayM37wsk1bDr4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:65:8e:af:89:93:58:88:29:97:4f:78:b9:7c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Validity
Not Before: Jul 27 01:00:38 2025 GMT
Not After : Jul 28 01:00:38 2025 GMT
Subject: CN=5f4f0953bae55576b20c880c07f0e774c8709b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:79:a9:a6:c3:2a:6a:f6:ba:44:dd:9d:6e:
86:34:60:e1:3c:f7:0e:1c:1f:7b:c2:8c:25:59:ee:
9a:9c:ce:83:95:6d:e4:f7:67:50:7f:c1:f6:01:93:
da:be:63:e5:f4:db:e0:d2:1e:a8:a7:0d:d9:b4:64:
3b:28:6c:3f:b6:11:9b:86:96:b1:1e:18:1c:c6:b0:
6b:b9:ca:df:57:99:bd:45:30:91:02:86:2f:68:15:
7e:33:5b:69:9b:02:0a:75:a2:42:3f:57:f9:fc:fa:
e3:b4:13:a1:d8:4e:6a:db:88:38:b1:f6:b3:3c:3a:
c2:85:27:98:e7:72:d7:8d:af:66:86:3c:96:06:d6:
71:e3:82:72:3a:15:3d:b9:4d:b5:d9:c6:62:5e:05:
9e:b4:32:51:44:70:96:dc:7c:82:91:67:dc:0d:61:
c6:e4:e8:cc:59:98:d7:84:9c:c9:75:03:1d:73:49:
a5:44:90:20:92:90:ac:2f:98:62:cf:e6:53:95:f1:
68:73:6c:d1:c3:21:85:d0:0f:b1:74:19:02:84:6c:
a7:3b:65:0e:3d:8f:77:9d:21:10:d1:62:40:d9:7b:
22:87:a0:5d:f4:c7:f8:a4:bd:94:0a:04:bb:2b:21:
bf:b8:86:53:f8:d3:9c:46:b1:97:30:de:5e:f5:b4:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:09:53:BA:E5:55:76:B2:0C:88:0C:07:F0:E7:74:C8:70:9B:3B
X509v3 Authority Key Identifier:
keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:9d:32:52:e2:37:ba:e9:e2:3e:9e:7f:ff:93:a6:db:3d:
15:8a:73:b2:03:db:1a:f8:e5:d0:0b:d5:bf:39:95:09:5c:57:
72:6d:a3:1a:6a:3e:ab:4d:1f:32:4a:fd:df:20:96:5d:c5:9c:
40:a3:8e:50:00:51:33:dc:75:49:8e:7b:d4:f4:23:6b:d6:db:
b5:26:e5:8a:a1:3d:b0:4b:8a:29:8c:ca:e5:c7:c8:8e:1b:7b:
6f:c8:a7:a2:ab:69:8e:16:d7:b8:99:6c:46:d4:3f:06:02:3c:
7b:5f:1f:08:ad:00:cd:a4:d9:6d:6f:df:be:c3:1c:63:a3:88:
a7:a4:67:cb:8c:36:09:ce:94:5d:b0:75:b2:8b:c5:f0:ab:4a:
9b:f2:5a:4a:a0:ed:2e:c6:a6:fd:32:70:08:c3:e3:fb:ee:0f:
06:f0:96:50:32:6f:c3:24:72:96:6a:f7:3d:1e:22:6e:19:49:
db:56:77:ae:08:1e:39:82:02:da:ce:c1:62:fc:ee:12:86:09:
0b:0d:18:dc:44:d5:1b:8c:61:d4:30:9d:78:d9:13:47:40:da:
5d:2c:57:ef:a0:34:2c:fd:f2:15:36:c5:72:c9:27:51:29:58:
00:f9:dd:6a:0b:b7:e9:af:a0:6f:23:a1:78:5e:e9:c9:f4:54:
fb:d6:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:54:03 2025 by rpki-client