Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: cd5OAXa6rp7ySwLCzIumAXRQEOnTyZH6LrTN943sFeA=
Subject key identifier: 8A:80:B2:3D:75:8E:79:D1:26:AE:FE:F6:67:E6:60:67:87:CB:69:65
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 01984E1DE9B829B5D840AB11A63C7F90CC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 0296
Signing time: Sun 27 Jul 2025 23:00:39 +0000
Manifest this update: Sun 27 Jul 2025 23:00:39 +0000
Manifest next update: Mon 28 Jul 2025 23:00:39 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: EwihdNLJPzeEpT9HJgPzCciVTQa+g82TTtjb29tCc4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1d:e9:b8:29:b5:d8:40:ab:11:a6:3c:7f:90:cc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Jul 27 23:00:39 2025 GMT
Not After : Jul 28 23:00:39 2025 GMT
Subject: CN=8a80b23d758e79d126aefef667e6606787cb6965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:43:44:e5:1c:61:8c:9d:76:dd:a4:fe:d1:
f0:45:3f:72:f3:92:10:f8:7b:e4:bf:04:a9:34:80:
ed:68:e8:31:65:e2:18:a8:96:9e:b9:55:85:e6:f7:
06:96:74:9d:82:cc:cc:eb:f1:27:1b:69:3c:cb:c1:
92:b0:58:a1:05:c0:3f:49:4e:9a:88:c9:e7:1f:a9:
d5:6a:78:5e:06:d4:e2:ab:eb:7c:17:36:b2:e4:a9:
80:7c:e3:3d:78:8e:26:8c:bb:de:1d:9a:fe:eb:27:
ae:ea:1b:ac:8a:5d:af:bc:56:34:a7:27:a1:4e:08:
8f:72:ec:91:83:1d:74:44:be:c0:b6:34:02:78:6c:
7d:44:67:ac:a5:5e:10:36:95:32:09:c4:ca:a9:db:
80:97:20:df:37:15:eb:93:86:1d:39:cb:5a:69:78:
d7:27:d7:d4:b4:ae:a6:f3:d5:0a:3a:ec:02:d4:bd:
4e:78:11:e3:0f:33:05:ad:48:a7:e8:26:ad:c5:68:
81:a9:1a:f9:0a:60:95:bb:a7:33:f8:95:8c:2b:fb:
c9:c4:a2:88:99:5d:34:5b:60:90:9f:35:fc:62:b5:
3b:e2:ca:a8:9f:a0:84:95:63:3e:39:22:df:ce:90:
64:b9:da:67:f4:91:cb:73:bd:19:c4:0e:e2:a0:c8:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:B2:3D:75:8E:79:D1:26:AE:FE:F6:67:E6:60:67:87:CB:69:65
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9e:ba:db:76:d1:1a:57:d2:0f:b6:bc:50:5b:d6:88:83:94:
47:d5:d5:80:d1:66:8e:51:6f:53:b5:b0:d1:9f:b5:a9:bd:26:
81:9b:0b:af:ab:86:21:d8:41:38:c1:b6:bc:0c:f1:27:d8:89:
12:da:40:db:23:bc:fb:36:a0:4f:97:96:36:4c:17:df:47:ec:
c6:fe:76:09:1f:ea:57:d9:3a:f0:c6:9a:ae:36:34:c6:dc:0e:
07:31:e1:86:bc:3e:35:2d:fe:3b:cf:ae:e3:19:a5:10:c4:8a:
5b:0e:c7:ff:bf:93:4c:f2:e9:1b:58:22:49:66:4d:c5:ea:52:
fd:04:ac:c9:d0:49:06:52:94:3d:50:03:78:29:48:fe:84:9a:
5a:5c:22:11:e5:c2:e8:16:c2:4e:e0:48:61:e5:68:ac:c2:07:
d2:90:bd:1f:7e:38:51:a2:cb:9a:1f:57:20:6e:3b:24:9b:96:
f0:7b:68:99:80:c4:3f:33:8a:9b:93:3b:c6:63:d4:13:5a:02:
24:db:6f:37:09:31:65:6c:9b:bf:9c:d3:ab:be:44:de:20:3b:
37:2f:a6:57:27:8c:25:22:ac:2a:da:a3:d0:8c:df:2a:69:5f:
07:aa:6d:56:19:fe:27:47:65:a1:79:e4:b6:85:c2:16:a9:e8:
05:d3:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:05:13 2025 by rpki-client