Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: bou17yyxoMsQ7zmBhrTZXuOLt7P1Cj42urQPoKNEu7U=
Subject key identifier: A9:CA:93:2B:DE:69:C7:3F:65:00:9B:1B:E3:9C:EF:BE:DC:78:DC:85
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 01982935B4520983E777A76602BDEEA1B4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 24
Signing time: Sun 20 Jul 2025 19:00:41 +0000
Manifest this update: Sun 20 Jul 2025 19:00:41 +0000
Manifest next update: Mon 21 Jul 2025 19:00:41 +0000
Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: ZM/w/cFs+tEgFO+yWLRlxCMzwiiwKGrTIOUFYhHL95E=)
3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:35:b4:52:09:83:e7:77:a7:66:02:bd:ee:a1:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Jul 20 19:00:41 2025 GMT
Not After : Jul 21 19:00:41 2025 GMT
Subject: CN=a9ca932bde69c73f65009b1be39cefbedc78dc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:3a:b3:92:0d:4f:27:fe:cd:ba:ea:94:1f:
b0:27:85:de:5f:ab:8f:ac:40:0b:ca:07:18:6f:da:
7b:5b:7a:39:c1:8e:e5:73:5e:db:86:ff:c2:1c:a8:
e8:a5:4a:77:96:92:0a:98:18:a2:de:46:0d:1c:e5:
95:87:20:7a:a8:98:92:5c:db:61:4f:a8:22:3a:d7:
85:a1:56:32:33:c7:fa:54:16:2f:6b:b8:bf:14:43:
68:a3:5e:8b:71:21:60:b8:61:02:88:a6:e1:19:b9:
81:68:6b:3e:ba:ef:5a:fa:8e:05:a5:64:d3:a6:1f:
a0:13:a4:77:8b:d9:62:9c:f3:62:b7:7b:71:c7:39:
8b:f3:87:d8:50:b9:04:bb:2d:07:2e:6f:ba:84:78:
4d:14:5d:a8:65:15:51:e8:aa:bf:59:78:ae:64:21:
fd:3f:f9:79:15:ec:3c:9a:92:be:00:59:4a:50:af:
f9:80:a1:93:d3:87:5b:9c:a4:1b:72:f5:44:cd:61:
b1:83:0f:75:66:0d:b2:c3:6f:40:74:fe:3d:5f:fd:
30:d7:e7:90:8c:68:3a:2f:81:b6:26:e4:2c:fc:79:
64:b9:ca:7e:fe:a9:7b:5f:6a:ca:6b:00:f7:45:72:
37:15:d6:53:7e:25:da:0c:4c:84:42:97:93:a9:d8:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:93:2B:DE:69:C7:3F:65:00:9B:1B:E3:9C:EF:BE:DC:78:DC:85
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d4:c1:28:5b:01:01:fb:eb:f0:e4:2d:63:40:0e:2e:75:b3:
61:95:b8:09:8d:a7:0e:6c:ac:b8:11:f2:32:9b:02:aa:48:f9:
bb:87:d8:c6:f4:a2:06:f6:50:f7:c2:79:3d:83:f7:0f:bb:50:
ef:41:dd:67:65:cf:85:bf:6d:a9:2d:7d:a9:74:d9:ae:d9:10:
37:b3:cd:11:8a:78:5b:83:7e:39:90:73:36:9c:0d:8e:23:46:
4b:c4:ce:d3:18:48:a6:9c:b5:9b:12:6c:f2:c4:03:02:2d:27:
d5:fc:73:14:65:c4:cf:cf:19:12:69:1e:c0:2e:6d:e7:68:bd:
ad:b6:da:9b:29:b1:04:02:51:b4:eb:c5:41:4c:3f:73:6b:2d:
b2:c3:66:b2:b6:bf:ee:9a:96:c3:2d:2a:62:c0:ae:c3:a6:c2:
11:d8:c0:9f:09:41:e5:37:2f:79:35:e0:75:fb:0e:46:68:17:
d7:d1:81:16:ce:3b:4c:e3:9b:95:f3:09:1f:79:60:c4:25:b4:
25:5b:ae:66:31:85:68:22:44:f5:51:fe:07:bc:25:a6:82:94:
6a:93:fd:9d:e6:ac:00:0c:1b:4b:61:46:80:3c:41:34:4f:4f:
8b:f7:bf:6f:63:71:d5:53:82:18:83:ae:6d:1d:86:8a:ba:75:
14:97:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:20:53 2025 by rpki-client