Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: pyOZaKTHZqL5Znrayu2xN5qqGW3mm7vAfidIBHRuWx4=
Subject key identifier: 76:B7:12:4A:EF:08:63:27:31:5D:15:68:84:56:AD:6C:C1:B7:99:7D
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 01991A2DDF56C7B73DA479A9A1B7BF3E6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1653
Signing time: Fri 05 Sep 2025 14:00:37 +0000
Manifest this update: Fri 05 Sep 2025 14:00:37 +0000
Manifest next update: Sat 06 Sep 2025 14:00:37 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: Y8MVDyLeEfINYsBVOGEi/WKYQbUla2rx8kX+yOKTDz0=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:2d:df:56:c7:b7:3d:a4:79:a9:a1:b7:bf:3e:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Sep 5 14:00:37 2025 GMT
Not After : Sep 6 14:00:37 2025 GMT
Subject: CN=76b7124aef086327315d15688456ad6cc1b7997d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:f6:19:f5:ce:99:46:31:4d:07:1e:8d:44:
0b:f0:83:de:2c:89:f7:ea:66:49:6d:60:f1:72:b0:
e1:4b:66:f3:58:31:3f:5b:79:d7:4b:85:95:0a:fd:
84:23:e5:fa:cd:35:d0:98:08:77:3d:c1:a8:8d:a3:
f4:9b:09:d0:60:6e:70:33:39:a9:49:15:03:41:ab:
67:91:68:93:e8:6d:81:67:60:f3:c4:7d:89:bc:db:
a0:91:6a:38:65:71:e9:da:8e:85:bc:4f:a1:e5:6d:
92:4d:80:2a:1b:b8:a3:fd:d7:dd:a1:60:ff:f6:f6:
e6:73:b7:0b:d7:51:65:3f:ac:08:4d:3d:fe:f5:15:
b6:ad:be:65:2d:10:18:71:cd:16:48:32:e4:c7:0d:
54:75:cb:c5:06:8e:3e:fb:db:4f:32:76:2d:35:41:
1b:36:b6:a1:42:b2:4a:bf:b2:8a:ed:97:a0:f2:7e:
45:d1:50:d1:49:c4:71:e3:b1:d7:97:c9:fe:9a:9e:
6e:da:d7:72:8a:b0:f9:f9:e3:e0:2c:27:6a:e6:58:
85:76:48:36:72:85:d8:4a:22:69:7d:04:03:ac:b7:
3f:42:e9:63:aa:80:e4:c9:1e:ae:f1:ee:16:ff:f1:
2b:73:55:5f:4f:06:02:7c:58:74:a1:d1:52:21:a2:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:12:4A:EF:08:63:27:31:5D:15:68:84:56:AD:6C:C1:B7:99:7D
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ab:1b:5b:a5:41:5f:41:7e:3b:42:4b:5a:0b:97:33:f3:18:
35:be:78:6d:e2:a5:90:44:30:f5:a3:8a:0f:e3:c7:64:b4:7f:
1f:ab:69:c4:23:ad:cc:89:5f:59:3c:90:f1:d8:87:30:3b:4d:
47:65:9c:e7:58:86:ab:0c:eb:e0:f7:d1:c5:83:e5:36:ae:95:
ba:52:ac:5b:93:e6:09:ed:e3:a4:f4:9d:63:1a:0a:ad:cf:11:
88:af:02:a4:01:9a:38:14:05:67:e5:f5:84:f9:92:cb:6c:c4:
ba:be:57:64:e9:d8:e2:39:01:e2:f5:06:3b:d3:8b:d6:76:1f:
f6:57:e0:d2:02:a2:13:a6:23:12:83:45:b4:80:ac:18:34:47:
02:86:6d:37:43:d7:dc:33:8d:3c:4e:a2:ba:48:16:4e:14:52:
24:62:ff:14:ff:74:26:dc:d7:91:2c:79:9e:7c:ca:4f:25:e4:
7a:e2:61:a4:00:8b:a8:25:2f:b5:5c:3d:35:e8:35:60:73:e5:
2a:d0:d0:89:e0:ea:ad:02:71:5e:b2:38:54:7b:72:4f:be:36:
02:0e:58:4e:7f:2a:99:d3:78:3e:2c:6e:9f:f2:75:19:db:19:
e3:05:86:f9:2e:80:5d:c2:fa:7a:fd:e2:ee:47:0c:70:db:79:
bb:04:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 18:49:11 2025 by rpki-client