Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: KdXUxoVRiMpViBqS+bYtehi4mndOOV4ymtDOuMK5w1I=
Subject key identifier: EE:B5:0C:97:1D:FB:90:6B:4F:51:28:B7:E9:08:5D:43:C4:F8:21:C0
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 0198499BDF0FBAA78FC17C5D7AB0B6FAE28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 048F
Signing time: Sun 27 Jul 2025 02:00:08 +0000
Manifest this update: Sun 27 Jul 2025 02:00:08 +0000
Manifest next update: Mon 28 Jul 2025 02:00:08 +0000
Files and hashes: 1: 9XlHb8rJg-OmDPMs6N_TKhkkHb8.roa (hash: cpk83kEdrOWJJYVKeP1fpe20g1cPT7sKTkIKvw0KJjI=)
2: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: g6DXtkBaWz/XidOX9vgXu2Iq2Inss4Dtpumi4gz/VPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:df:0f:ba:a7:8f:c1:7c:5d:7a:b0:b6:fa:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Jul 27 02:00:08 2025 GMT
Not After : Jul 28 02:00:08 2025 GMT
Subject: CN=eeb50c971dfb906b4f5128b7e9085d43c4f821c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:86:ee:d2:2b:6d:05:d3:7c:12:0b:75:de:
3f:42:99:66:f6:26:cd:f9:7a:a6:3e:42:ca:40:d9:
cb:21:47:da:66:94:62:a9:2f:f2:b7:42:67:7b:47:
9a:ab:5c:0f:b6:55:32:e7:9a:ee:15:ae:69:bb:55:
a1:53:74:00:ce:3f:95:ec:31:37:3c:2f:02:05:1b:
26:66:ab:3e:13:6a:f0:7a:65:d8:85:33:13:33:ea:
b1:61:cf:ef:58:36:97:6b:ad:5e:91:7a:7f:d6:a8:
bb:5a:b7:b9:19:7f:6f:17:ab:00:4d:42:d5:f2:68:
38:f3:ca:40:eb:ca:ab:94:f1:fa:b3:ec:79:4c:5e:
ee:19:64:33:76:6a:57:b7:c5:ef:d3:46:11:14:0b:
b2:8e:27:bf:bc:08:35:43:88:31:30:cc:20:bb:aa:
11:a9:69:48:61:f1:c1:b0:d7:90:a2:57:dc:5f:33:
d6:20:3e:03:85:76:e6:ef:c7:73:29:a2:6e:31:d0:
39:39:a8:bc:54:80:d8:65:71:bb:bd:f4:31:94:2c:
8b:86:e8:b9:82:86:3a:cd:c8:04:3c:ca:cc:91:dd:
64:2f:1d:77:a2:2e:fc:6d:ff:cf:a5:a4:34:4c:55:
52:01:4f:a7:d5:70:1d:77:3e:ef:df:5d:07:43:ed:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:0C:97:1D:FB:90:6B:4F:51:28:B7:E9:08:5D:43:C4:F8:21:C0
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e7:f4:6d:fa:16:49:0a:6d:8e:63:5d:b6:ca:ff:43:8c:ae:
8a:1f:f9:c9:c0:84:93:72:04:f6:ab:aa:09:ea:28:29:9d:65:
9f:f3:58:94:11:5f:fc:68:f0:02:dc:5f:83:46:50:e6:fa:79:
d8:04:f0:60:cb:eb:78:30:b2:99:13:ef:3d:c2:3e:9a:37:e0:
e1:9f:fe:c2:a3:3e:fd:bf:89:94:e7:55:54:96:87:3e:64:60:
fd:40:05:a3:74:56:23:a3:fd:7e:9c:63:88:30:75:c6:49:42:
01:d0:29:c9:09:18:74:11:27:52:d1:b4:0f:59:cd:27:c6:6a:
21:b3:26:be:9a:72:56:71:61:0e:92:63:f5:70:1d:c4:cc:01:
79:dc:08:20:7a:28:c7:60:50:11:2d:42:36:1d:05:12:cb:dd:
c5:4b:ec:7e:ec:53:12:09:b2:90:ff:1c:b0:d0:70:c3:c0:80:
8d:47:a2:61:fa:b9:2b:26:76:29:f9:19:77:70:06:2f:5c:77:
49:ef:80:dc:72:d7:54:e2:f2:9a:f4:9b:14:4b:9a:0c:be:2e:
8f:4b:e3:4b:c0:ce:ca:7d:8c:34:3e:d4:82:8f:3a:34:f7:ee:
99:7d:59:8f:29:9a:73:47:53:bf:fd:f7:de:9f:b5:8a:d9:49:
9d:97:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:10 2025 by rpki-client