
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: kkjmnURh3aUKiITo5qNuh5vlEk2rAD+ZKyuMUn8DNK0=
Subject key identifier: 43:03:4E:5E:66:FE:75:26:0E:73:59:66:B1:6B:61:A9:E0:34:A5:44
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 0198499C4BC32EFCBEB9800CAD9CF0E9F7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 0A3C
Signing time: Sun 27 Jul 2025 02:00:36 +0000
Manifest this update: Sun 27 Jul 2025 02:00:36 +0000
Manifest next update: Mon 28 Jul 2025 02:00:36 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: LKINCdUJzhv+KJ+KYmb07YPTuxoLELNopeXtt3S1C9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:4b:c3:2e:fc:be:b9:80:0c:ad:9c:f0:e9:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Jul 27 02:00:36 2025 GMT
Not After : Jul 28 02:00:36 2025 GMT
Subject: CN=43034e5e66fe75260e735966b16b61a9e034a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:dc:f2:fd:1a:42:63:31:47:06:68:97:ce:
2b:22:96:2d:3e:d4:75:9b:d4:2b:77:48:ee:1f:61:
9a:a7:83:2a:11:f6:8d:ba:37:1f:97:46:08:70:09:
99:94:be:a0:68:e8:59:53:6f:20:e1:75:10:c0:1c:
57:a5:c5:be:d3:09:18:1f:8f:dd:b9:56:6e:b0:0f:
38:fe:00:cc:bc:ea:a4:09:de:41:e7:1a:66:d1:e6:
a8:66:de:fc:b4:70:29:e1:d9:0d:ce:fb:64:ee:36:
f0:c5:e4:98:c1:4d:e9:77:b6:e6:4a:c8:90:09:e9:
ea:ee:5b:e4:c5:e5:b4:c3:ff:23:ea:9d:ab:e5:be:
50:e5:15:4c:59:00:ce:8d:02:52:9b:c5:08:47:c7:
91:e7:8d:6f:99:9f:72:10:ae:b0:ee:51:37:d9:3c:
f7:37:e3:bf:86:32:a1:db:e3:66:f2:3b:95:a8:cc:
5b:e9:28:69:75:1f:4b:f0:a0:de:68:35:a1:11:f1:
01:ee:d7:eb:e6:29:0c:af:5b:97:05:19:f1:3e:58:
c5:8b:dc:de:3d:01:d5:4d:04:e7:2d:97:b5:07:b2:
62:5e:0f:33:aa:ca:ad:13:c2:5c:36:62:63:1f:9e:
bc:9e:b9:6b:af:00:c1:1a:7e:bc:4f:03:0f:c9:56:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:4E:5E:66:FE:75:26:0E:73:59:66:B1:6B:61:A9:E0:34:A5:44
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:c4:8a:9d:d2:7b:b6:e0:df:5c:cc:13:57:8a:85:16:62:
f7:c1:0f:86:e3:d4:7b:05:b5:8f:8d:db:f5:e2:46:88:c1:0b:
75:68:bc:d7:d1:a0:8b:88:69:53:a0:59:dc:d8:f0:cf:10:ad:
e1:aa:cf:5f:c3:ee:ea:eb:e2:b6:fd:73:7e:f7:64:75:2c:43:
60:4f:59:48:44:38:76:27:88:52:e2:b0:9c:a7:de:7c:a8:9a:
7e:b5:63:15:39:53:92:66:bd:33:08:56:59:6f:96:d7:b0:ec:
49:44:d8:09:ab:ed:f0:ea:bc:f3:40:cb:73:d4:02:6c:1c:03:
f2:50:eb:0a:92:d0:1f:cd:18:09:39:e1:3e:83:fc:ca:1c:96:
8a:f0:e9:67:da:85:4f:52:6e:04:4d:7b:79:83:91:4e:df:9c:
4d:d9:55:bc:d4:cf:1a:de:4c:b4:c0:b0:d8:8e:fd:dd:95:26:
40:c5:8b:ee:4c:ec:f3:41:0d:ed:89:f2:0c:27:1c:94:ae:8f:
28:b3:63:ac:1b:95:da:cf:6b:61:68:57:1d:24:72:20:bc:ff:
56:dc:0f:fc:64:de:67:eb:6d:a5:01:1d:a3:fc:f8:e8:46:d4:
a6:2c:59:45:11:e4:dc:68:80:cd:69:fc:83:30:7f:c2:ff:1d:
48:aa:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:20:32 2025 by rpki-client