Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 7utmvFxH4c0eue1UBocSa9ZTNtmhDe4p5eZKumyEgic=
Subject key identifier: C4:35:EC:4B:FB:E9:F3:18:1B:E7:0A:9E:D9:75:C2:92:ED:AA:F0:41
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 01984E1E0AB2D914049F1B6AF5C1789E65C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 021A
Signing time: Sun 27 Jul 2025 23:00:48 +0000
Manifest this update: Sun 27 Jul 2025 23:00:48 +0000
Manifest next update: Mon 28 Jul 2025 23:00:48 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: +idFa/RSf2DOkskF4YCjTSI9j4NGu0KUIRuZ1JLqQAA=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:0a:b2:d9:14:04:9f:1b:6a:f5:c1:78:9e:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jul 27 23:00:48 2025 GMT
Not After : Jul 28 23:00:48 2025 GMT
Subject: CN=c435ec4bfbe9f3181be70a9ed975c292edaaf041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:14:7f:c8:01:1c:30:c9:df:b5:6a:aa:34:
9d:8d:78:1b:d3:ef:0b:53:99:21:3a:00:a9:93:35:
18:63:6b:ef:cd:d4:52:56:e7:02:ba:a8:e2:3e:ef:
36:bf:06:fe:3b:b0:2b:2c:a2:4a:ea:81:d0:30:d9:
fa:b2:d2:eb:79:15:1c:6a:c7:9d:96:bb:48:1a:32:
bc:c3:81:bc:29:f9:d8:c9:c7:e3:cf:4c:47:5f:8c:
3d:f8:fb:cf:cd:56:92:94:b2:7c:d0:6b:6a:73:57:
cd:5d:16:40:c0:8d:63:72:e6:3d:55:3b:76:f7:0c:
87:d2:6d:c5:f2:6b:3d:15:ff:1d:5a:db:c9:0d:cd:
cc:58:61:2f:fd:10:9c:3f:3a:78:ce:3f:67:c7:b7:
3d:f4:f3:46:02:ff:5d:88:e0:9d:6b:0d:30:41:f5:
28:00:5c:5e:47:35:c2:d6:fe:ab:33:40:af:6a:cd:
af:9f:64:ff:3e:01:a3:25:b2:af:4c:dc:63:ca:79:
b8:a3:ae:c9:a6:5c:8c:83:5d:99:4d:47:49:dc:82:
1d:cc:57:49:51:3b:f2:70:01:0b:e9:cd:5e:1f:47:
7e:95:57:ec:41:4d:ba:53:0b:c8:4b:7f:c9:56:e2:
e0:9a:59:f9:93:b9:c9:0e:28:e7:6a:39:30:5b:ac:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:EC:4B:FB:E9:F3:18:1B:E7:0A:9E:D9:75:C2:92:ED:AA:F0:41
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a2:39:a9:67:cf:19:63:de:b2:bb:c0:dc:94:8d:58:79:0e:
61:61:a1:bf:b9:4e:8b:89:5f:d9:78:ba:45:b4:d0:31:f5:a6:
cc:54:25:5f:2d:45:c1:dc:28:7c:28:1b:ab:5a:b9:a7:f8:3a:
b1:fb:e5:15:08:01:01:2c:a3:bf:7f:a8:01:d3:41:6b:0c:b8:
c2:9a:27:bd:f3:2b:4d:b9:26:b7:cd:3f:c7:4b:1e:0e:42:ae:
40:e8:bd:f3:52:2c:f7:54:bb:e1:0a:63:c4:7c:a6:0c:aa:57:
c8:b6:72:7e:96:50:2a:67:d5:38:9e:07:9b:0b:06:fb:a1:de:
8a:de:bc:73:70:4a:d6:d6:a9:a8:2d:dd:aa:57:b0:f9:2c:cd:
cd:5a:47:9a:3d:2d:d1:42:86:f7:b8:47:8d:64:ca:3f:5e:31:
a2:c7:82:79:db:d7:14:cf:e1:b0:ae:f8:ec:c5:fc:44:f5:25:
de:51:aa:c8:d2:06:39:e3:74:74:a7:95:a6:b2:b5:54:fc:16:
9c:aa:54:f2:08:a0:bc:7d:20:ff:29:16:d9:88:0b:c5:dc:ec:
6e:8e:64:cd:11:b8:de:e9:a5:59:ac:66:81:9a:01:0a:84:d2:
9c:04:83:dc:c5:4e:06:43:3a:f3:40:ba:34:59:46:0a:c4:e7:
b4:df:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:49:38 2025 by rpki-client