Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: g9RgdDZ4I281k7kvUHq9ZHtsFpRl/PPfGZL05L5Jl/Y=
Subject key identifier: 43:8D:45:59:80:0B:C2:9D:5F:23:30:EC:2A:4F:91:8A:F8:BD:EC:12
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019848F73B117E9E0F440C74663CCCF7AE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 13BE
Signing time: Sat 26 Jul 2025 23:00:18 +0000
Manifest this update: Sat 26 Jul 2025 23:00:18 +0000
Manifest next update: Sun 27 Jul 2025 23:00:18 +0000
Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: KZYi2Q0Xv9kOSfxhNOc+TP9BG51I2vSpii5LraxN/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:3b:11:7e:9e:0f:44:0c:74:66:3c:cc:f7:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jul 26 23:00:18 2025 GMT
Not After : Jul 27 23:00:18 2025 GMT
Subject: CN=438d4559800bc29d5f2330ec2a4f918af8bdec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1f:36:62:c0:51:2d:0f:8c:fc:ba:e5:02:56:
70:3c:6d:a5:a8:a3:ee:65:29:ca:d5:c1:a2:7f:e7:
52:b1:70:71:ee:75:09:9a:68:c7:e9:df:7a:34:2d:
72:41:cd:d6:e3:65:7b:f4:11:2f:91:31:ff:e4:92:
13:9d:05:df:ce:b0:45:54:b5:93:23:bc:db:49:c6:
52:9c:8a:ac:8e:c5:80:6a:82:1a:9a:52:01:a8:d0:
d2:95:60:78:11:6b:58:85:e4:96:3f:cb:a4:27:52:
2c:ff:fe:00:d7:c5:e1:e5:db:57:22:0d:82:8b:65:
db:b7:6d:81:e3:7e:8b:86:05:14:26:df:be:87:33:
86:ee:10:21:6b:6a:64:cd:18:42:2d:49:d4:34:1a:
a9:05:d8:8d:b5:cd:90:a7:4b:bc:fe:0c:0b:9d:8a:
7a:70:37:9e:0a:d4:5c:28:99:64:aa:b0:b5:9f:1d:
31:d2:55:f8:25:f3:d3:7b:58:a4:2e:a7:67:41:17:
72:d0:5c:56:ed:62:69:0c:80:ab:63:cc:da:63:6a:
18:7e:97:5a:b0:f8:f5:ff:0b:ce:9a:66:1c:0f:e4:
07:ba:ae:23:78:4f:33:ca:0f:35:e5:e7:18:0c:d9:
d1:5d:61:8a:0a:c2:b8:13:3d:b6:39:65:d0:4d:34:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:45:59:80:0B:C2:9D:5F:23:30:EC:2A:4F:91:8A:F8:BD:EC:12
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4f:c0:0e:33:96:5a:8c:39:ea:1b:76:8b:0c:94:42:ee:26:
68:93:f1:d2:97:b0:70:ef:a1:a9:ee:7a:e4:1e:8a:4c:01:08:
db:66:5e:3c:05:e4:66:a7:df:7c:6e:2e:63:ad:6b:f2:45:ba:
51:c6:68:72:56:4e:36:c3:b2:0f:7e:43:45:07:1c:6c:30:fa:
8d:2f:f3:ff:75:f2:30:b1:62:ae:37:b7:f9:24:84:81:67:8f:
88:b2:31:88:24:af:6d:fc:5c:9e:c7:63:a8:41:12:6b:1a:8a:
64:15:0c:6c:31:23:d6:15:e0:9e:ab:5a:01:28:89:7e:92:57:
01:81:b3:2e:68:51:7a:a7:29:26:27:c2:b1:ca:2e:ac:48:3c:
74:bc:6f:7e:89:1c:aa:e7:d4:46:e1:1c:08:94:c9:6d:95:79:
67:6e:31:ef:68:c7:9b:a9:07:54:e9:29:77:a6:04:21:7f:f7:
f3:39:45:f3:1e:bf:e2:b5:85:a1:54:bd:a2:f4:a8:06:21:29:
52:f3:89:94:e6:6e:ac:96:fa:ed:9b:93:2a:46:ec:86:44:a6:
5e:78:c2:b5:2e:bf:f4:27:b8:29:d6:bb:e6:23:58:61:a1:aa:
09:be:01:a7:03:b6:de:55:55:dd:ad:df:44:fd:93:6b:cc:32:
1e:0b:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:40 2025 by rpki-client