Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: U/ACOqG5RUiMnbtjIUxz/gYNsusnqZ+qv+nhGwQUiEs=
Subject key identifier: D5:19:CD:E9:50:93:49:6C:05:35:86:A4:EB:B0:59:EE:84:1E:CD:4E
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019848531A9A5BC17BD89BF697CE318A513A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 070F
Signing time: Sat 26 Jul 2025 20:01:02 +0000
Manifest this update: Sat 26 Jul 2025 20:01:02 +0000
Manifest next update: Sun 27 Jul 2025 20:01:02 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: WaKps2I488f0Nc1MvaSyzu56/x3QuLqcZeSvXX3SaVA=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1a:9a:5b:c1:7b:d8:9b:f6:97:ce:31:8a:51:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Jul 26 20:01:02 2025 GMT
Not After : Jul 27 20:01:02 2025 GMT
Subject: CN=d519cde95093496c053586a4ebb059ee841ecd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:ca:4d:9f:63:fa:d4:8d:2a:ef:f1:c8:2b:
d7:00:ca:03:99:ef:79:91:cc:61:88:2d:21:e9:31:
10:c9:32:92:30:96:5e:6d:7e:9b:3e:f3:fb:c4:9c:
fc:2d:b8:e3:b6:13:b0:1d:e2:f4:d8:37:c3:95:5d:
af:08:0c:4f:ce:67:7a:3b:f9:97:55:fd:9f:60:57:
4a:3f:24:19:0c:55:ab:ff:dd:86:33:f2:09:d4:23:
9c:4e:22:61:d2:fb:20:75:0e:e1:72:3f:1b:77:b0:
82:3d:bf:82:6e:fa:60:49:13:aa:57:a8:6f:e9:f4:
51:99:70:ce:94:c8:c4:81:42:d2:5d:64:0c:55:35:
59:ce:68:d0:a3:cc:a0:bf:0e:7e:13:a5:70:47:69:
5a:c2:cb:ff:af:62:06:03:3e:10:52:18:f1:6c:58:
3a:c5:6e:74:da:0c:2f:27:be:de:a7:ea:ad:c0:d7:
50:4a:ea:fe:78:dc:48:11:4a:62:66:63:e8:c1:bd:
a8:a3:9f:1d:1b:44:13:53:37:fc:08:56:4a:93:7f:
3e:bd:38:03:5a:c3:0a:26:11:e5:8a:cc:0a:1a:55:
75:23:ee:51:cb:c9:60:3f:f4:2e:f5:a2:53:32:d8:
3f:38:db:e4:c8:0f:2e:e2:8b:14:c0:ec:30:a6:cb:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:CD:E9:50:93:49:6C:05:35:86:A4:EB:B0:59:EE:84:1E:CD:4E
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:b3:83:cf:f0:dd:6e:00:6d:de:f7:f9:d1:b7:90:5a:5e:
dd:60:4d:a2:03:1c:d5:d8:9d:38:e0:d3:b2:98:df:84:86:5d:
b9:b7:c9:91:d4:bd:31:a7:e1:e5:e6:1c:b2:24:4d:f0:c4:c2:
be:4f:81:a3:ff:00:47:f9:4a:bf:df:4b:ae:2d:38:55:67:d0:
08:6c:ec:d0:4d:27:b0:05:b6:24:69:15:65:28:27:9f:55:3e:
7e:06:1e:dc:ea:3d:d4:66:1f:f3:73:15:a2:c2:f9:eb:99:7d:
e9:ec:91:ae:4f:0d:28:cf:2a:08:4f:cf:8f:cf:5f:ea:da:2b:
35:57:f7:6e:ef:ea:b3:56:48:d2:4f:71:54:77:89:f9:14:13:
07:ea:f0:f5:48:43:15:a2:da:9e:17:0e:0f:21:20:f3:db:83:
ab:c7:fc:bc:0c:9e:85:d6:27:21:6d:a0:b1:95:bd:9f:0f:64:
8c:2d:23:3c:2d:31:3e:e9:bc:f3:62:07:fa:33:f5:46:1e:8a:
a4:53:3f:e7:4c:5c:4b:67:b3:78:78:86:3e:d4:44:2d:50:23:
84:8a:a6:05:fb:34:a3:f8:c5:c5:e0:ff:7c:77:e4:66:dc:32:
c4:53:99:cc:04:9f:98:b0:58:67:d9:cb:2f:eb:e4:22:6b:3b:
58:bd:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:24 2025 by rpki-client