
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier: XlZJ/NQwhbdJkXjWY4aloquG5weKqR69QXprby6Zzvs=
Subject key identifier: 79:F8:B9:AA:C2:FD:21:22:97:F0:6E:55:2E:CF:51:A6:1D:9A:38:87
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 019853447E14CD588ACEFD5040EFF839E315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number: 04C9
Signing time: Mon 28 Jul 2025 23:00:54 +0000
Manifest this update: Mon 28 Jul 2025 23:00:54 +0000
Manifest next update: Tue 29 Jul 2025 23:00:54 +0000
Files and hashes: 1: ZQAyFws7DTZX8u1fY_j_CXtWmSw.roa (hash: rqxW0DHYx0WB4ZZV6XWEMvjksg8LNQ4dfFaekkzMvBk=)
2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: /Pv53TsbLFB9seqVWD58JUjgRyv16OnV+1qeyt0qB4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:7e:14:cd:58:8a:ce:fd:50:40:ef:f8:39:e3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Jul 28 23:00:54 2025 GMT
Not After : Jul 29 23:00:54 2025 GMT
Subject: CN=79f8b9aac2fd212297f06e552ecf51a61d9a3887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:f8:fe:a3:5c:5a:96:37:f6:ff:0d:30:79:
d1:6f:2f:df:2a:de:d9:50:97:c7:7f:43:80:d4:34:
a3:5c:2b:54:74:a4:82:38:b5:f7:19:f9:fa:62:2b:
b2:7c:42:85:1f:5a:86:c9:db:9f:56:3b:ef:61:2d:
5b:dc:0a:29:48:65:dc:53:49:34:5d:ec:83:a3:14:
1d:a9:56:b6:1b:fb:91:3e:32:91:f5:a5:de:4b:0d:
cd:08:b9:cf:89:10:31:dd:47:67:c5:dd:aa:5d:b4:
4b:4f:9a:c3:ad:fa:71:84:15:80:ef:e3:71:5b:90:
e1:21:00:12:f6:02:81:1c:b6:db:b1:28:70:18:4a:
7c:e4:94:2c:a0:5d:75:45:5f:68:4b:41:1a:fe:f6:
8d:ce:c7:58:9c:ba:72:94:31:7e:5b:10:7d:b6:7d:
1d:a6:00:0d:5d:45:dd:a4:ec:25:70:21:92:76:e1:
ef:0b:52:ed:60:63:e1:ff:94:36:ee:3b:04:27:c7:
03:4d:4d:f9:61:c3:cd:df:50:8b:3b:9c:ce:de:02:
07:a5:ad:b2:1f:bf:81:82:35:f6:62:1a:6b:62:c9:
1d:b9:4c:1d:0f:5f:cc:27:f2:df:af:49:af:dc:57:
97:ac:97:a0:14:e4:67:93:94:08:71:5c:44:b4:98:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:B9:AA:C2:FD:21:22:97:F0:6E:55:2E:CF:51:A6:1D:9A:38:87
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:6d:24:3f:9c:b1:54:08:a5:d1:40:ca:60:76:15:85:e2:
0b:2d:80:f1:86:ea:72:59:b8:30:60:4c:be:4f:6c:28:fd:fe:
09:1f:a1:69:e2:ff:66:e2:18:28:b1:ec:45:50:3f:0c:96:1f:
ba:7e:e7:26:b4:80:d5:95:ab:cd:4d:6a:ec:37:1c:f2:1a:0c:
ff:e6:f0:c0:6b:49:11:bb:26:34:03:a9:7a:5e:1b:74:0e:e6:
54:fd:3c:1a:21:d3:4f:53:54:4c:fd:2b:8d:c0:b7:2d:21:60:
bf:bc:e3:34:67:be:4f:0c:aa:3c:af:fe:2d:f8:48:d7:fc:48:
c5:aa:5a:b4:73:db:69:1a:42:00:e8:dd:a2:9e:7a:07:b5:9e:
f4:91:0f:fd:77:a6:96:d7:80:69:75:c7:a4:90:85:04:a5:45:
b0:06:05:4f:08:4e:dd:27:bc:73:48:fd:82:d4:6b:be:62:04:
66:9c:30:cd:38:38:84:a7:69:22:66:5a:fd:d9:0e:70:a7:f8:
65:4e:68:dd:67:47:38:99:4c:a4:11:83:d8:12:ac:67:7e:3a:
02:e8:0b:bb:1f:6e:82:40:ec:42:87:06:fc:58:e5:78:5e:8c:
dc:93:a0:17:c1:d9:cc:03:b2:1e:ac:6f:23:63:f1:46:7c:b6:
cf:16:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:53:30 2025 by rpki-client