Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: 1jeUrGAQ9bqpj6bla6i01tcSKV3q94wO58Fu4bcVLnI=
Subject key identifier: B1:E7:AC:A0:19:93:FA:67:99:89:F2:74:A8:E1:7B:EF:21:06:E8:F2
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 0198CD9441972EBE2C9A9771CF9A42C67DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1649
Signing time: Thu 21 Aug 2025 17:01:42 +0000
Manifest this update: Thu 21 Aug 2025 17:01:42 +0000
Manifest next update: Fri 22 Aug 2025 17:01:42 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: zmrbXgxVqsRIh8k0tTmEYv86xeomHQlrQ9sRWIXU5fE=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:94:41:97:2e:be:2c:9a:97:71:cf:9a:42:c6:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Aug 21 17:01:42 2025 GMT
Not After : Aug 22 17:01:42 2025 GMT
Subject: CN=b1e7aca01993fa679989f274a8e17bef2106e8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:0a:ce:88:78:8c:d8:a2:88:1f:0c:f3:d8:
78:85:b6:42:94:bd:ee:8c:de:7a:66:6b:14:ea:00:
7d:5d:97:9d:6e:1e:d8:dd:4f:60:70:fb:63:34:b4:
5d:80:5d:05:ee:38:c7:68:e1:6d:94:af:9c:2e:07:
6e:34:86:48:7d:e8:54:a8:64:72:48:0c:08:c7:0d:
d3:fa:02:25:25:1e:39:5b:2a:02:a7:f4:3f:49:d3:
7c:f5:29:51:1d:b3:4f:eb:3c:08:2a:7b:71:ea:06:
fa:a4:53:df:e1:94:9a:89:69:a6:4b:34:49:5d:a8:
18:17:d6:b3:9b:0c:f7:b9:65:eb:36:99:67:0a:6a:
12:f0:05:a9:29:e9:f2:87:6d:31:65:8b:ca:e4:70:
ce:51:ad:1f:5b:8e:98:15:10:f4:67:14:44:3a:45:
2b:aa:dc:9a:a2:cc:c1:23:8d:b1:d1:97:d6:51:6f:
24:95:4e:f2:3f:d9:21:f5:b9:c6:be:2d:21:5f:ab:
96:e7:c4:8e:2c:e6:75:13:c6:77:fb:6d:66:64:ff:
17:cd:73:86:15:09:85:d7:c4:3f:bb:9b:61:66:25:
bb:1e:3f:ce:0b:18:dd:05:63:2f:2f:e1:e8:a9:96:
3c:19:58:c6:cd:b2:68:82:bc:ec:c6:19:23:92:5d:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:AC:A0:19:93:FA:67:99:89:F2:74:A8:E1:7B:EF:21:06:E8:F2
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:17:2c:80:6f:07:e8:71:d5:1a:fc:c4:ff:b6:fd:7f:06:a4:
83:81:4a:5c:42:43:1b:3c:e0:2a:90:cf:d0:95:92:c9:ea:0a:
71:fd:2d:12:8e:bc:34:75:dd:41:a0:d2:92:0d:64:5f:0c:e3:
01:20:5c:6a:6f:2c:42:f6:40:df:dd:a3:33:b6:00:a0:f9:56:
b9:e3:53:93:bc:70:42:7b:48:ac:5c:d6:93:d3:d5:8b:f4:4d:
08:25:50:45:04:f4:b2:33:12:3b:fb:60:83:a3:c0:02:65:95:
fd:91:36:cd:f5:e7:5b:6f:2c:80:b6:2f:df:bc:29:ba:b9:a6:
1d:2f:0d:b0:fb:3b:cb:60:4d:83:2b:2e:bb:8a:c0:c3:b6:cc:
01:9f:98:1b:17:0c:50:2e:17:69:ba:7b:9f:f2:4b:8e:bb:22:
72:b1:19:d8:61:e4:98:04:65:52:3f:83:ad:35:6b:0b:18:17:
e5:5b:03:93:b8:4c:f7:89:23:b3:81:21:68:14:75:62:91:1f:
c5:94:3c:0d:3b:43:c6:68:0b:02:06:5c:9c:fa:d3:c6:21:dc:
eb:e1:88:8a:87:a6:de:d0:2d:db:8f:45:4e:aa:56:09:43:08:
b3:c3:d6:c2:11:9f:71:37:41:e7:d5:78:ba:8b:1c:7e:53:a3:
c6:e7:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 20:54:47 2025 by rpki-client