Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: WuyaFupXAq8GX57F2ytQf/IYyshMnZCa/0+9anpxsKE=
Subject key identifier: 46:B0:F3:F3:A3:9D:C7:73:D6:C9:7E:13:43:37:CA:10:81:3C:BE:8E
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 0198470915F443AD4E1DBA5EC27C3494FA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 14:00:34 +0000
Manifest this update: Sat 26 Jul 2025 14:00:34 +0000
Manifest next update: Sun 27 Jul 2025 14:00:34 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: wrHFAFAdjYSLVpMS3nDe9v9+CnEkqth0ZvtFY6SPo3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:15:f4:43:ad:4e:1d:ba:5e:c2:7c:34:94:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Jul 26 14:00:34 2025 GMT
Not After : Jul 27 14:00:34 2025 GMT
Subject: CN=46b0f3f3a39dc773d6c97e134337ca10813cbe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:62:ee:af:9a:44:c4:78:25:e6:70:43:db:
d3:01:28:dd:5d:02:73:72:a1:c2:f4:68:91:74:75:
3a:55:eb:8c:57:8f:b5:6c:41:45:88:75:2a:76:1d:
ea:66:1b:d8:bb:9b:92:69:e6:1c:ef:a8:db:7e:91:
64:ec:d8:66:e8:04:22:20:3e:2a:cf:46:66:ac:e0:
20:00:c1:68:e1:0e:df:5c:f8:cb:12:52:1d:40:60:
6e:cd:2c:1d:9a:64:1e:86:c6:96:b3:34:48:20:f7:
b2:b4:07:89:73:60:36:31:cb:db:b8:f4:97:84:cb:
dd:99:95:52:0d:96:0d:b7:8b:8b:2b:15:36:db:6f:
4b:92:8e:3e:0e:89:75:9e:ac:e4:82:f2:b7:4a:7d:
4b:9f:ac:0f:85:53:57:bd:37:85:04:5a:4e:1b:38:
84:99:02:b5:36:39:aa:93:05:32:66:e0:4b:f1:50:
33:7c:12:fe:cb:7a:eb:83:85:e2:f3:fb:37:cc:5d:
78:56:81:e7:76:b1:87:96:aa:e0:25:22:d0:e1:00:
2c:46:ba:66:e8:53:d5:f4:37:99:61:20:29:79:61:
15:aa:4c:6d:09:8b:b9:0c:2f:46:9b:30:fe:52:bb:
e7:0e:f6:c1:9b:0d:b6:b5:a8:c1:ef:de:37:54:2c:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:F3:F3:A3:9D:C7:73:D6:C9:7E:13:43:37:CA:10:81:3C:BE:8E
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:97:04:68:f5:60:bf:6d:ed:f7:07:33:59:03:54:0d:9d:94:
e0:27:7b:29:e6:68:01:c2:ad:ff:fa:70:43:17:d3:6c:7f:f0:
f7:f1:db:7f:3c:d6:f5:c1:90:2f:1e:ee:47:14:da:b9:dc:4e:
e8:d5:49:7d:dd:3d:b6:ea:01:39:8c:5a:e5:2b:0f:8e:90:12:
0f:01:0a:0f:03:59:cc:f0:6b:54:b6:ca:03:1b:a9:26:f3:a5:
4c:8e:18:7a:e0:2d:c1:36:cd:77:9e:9e:07:f1:09:ca:1c:73:
e0:e0:86:8e:7d:f3:b6:90:5f:a7:3f:00:c9:36:3a:0d:e2:59:
a3:da:80:45:dc:c7:d1:bd:a3:92:93:c4:59:ee:c4:77:dd:ea:
ed:91:99:63:e8:75:2e:cd:e5:46:5a:1d:00:ed:72:25:d8:47:
b8:c6:4b:1f:60:67:df:81:9a:04:4b:0e:79:38:91:00:5c:36:
89:1f:e8:a1:58:1b:ae:69:68:7a:37:34:a0:8b:ab:bb:3b:5d:
3a:a9:a4:af:78:32:97:9c:97:5c:cb:b7:0c:a4:f5:34:dc:94:
40:30:0f:03:2f:68:31:52:cd:d8:a2:36:62:ee:5d:cd:6d:d6:
97:d4:6a:88:13:be:51:eb:d2:5f:10:2c:c8:3a:c7:23:ed:21:
68:30:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:01 2025 by rpki-client