Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
File: jljYxh9jNQx3vvHWaxzPpaAODds.mft (raw, json)
Hash identifier: c1DHnCiK7Ga7/8FuWbXCL5KnsbkMp/8xmw7LaaRtZt8=
Subject key identifier: 56:4E:43:8C:E2:0E:4D:5B:05:3B:21:08:72:A0:B2:C6:9E:A9:A9:F2
Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Certificate serial: 0199221F4AE62CE8A627F9F5C2C8203C1961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:40 +0000
Manifest this update: Sun 07 Sep 2025 03:01:40 +0000
Manifest next update: Mon 08 Sep 2025 03:01:40 +0000
Files and hashes: 1: 9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa (hash: CXZ0q1QVdxVDaPhOEyR1OpgzYZ+TJLJ3piBsRyEK14c=)
2: jljYxh9jNQx3vvHWaxzPpaAODds.crl (hash: eyoJ4eHHIceWfv4Uxf1/qH5RV2OMoaHz+0fXI3kK3Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:4a:e6:2c:e8:a6:27:f9:f5:c2:c8:20:3c:19:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Validity
Not Before: Sep 7 03:01:40 2025 GMT
Not After : Sep 8 03:01:40 2025 GMT
Subject: CN=564e438ce20e4d5b053b210872a0b2c69ea9a9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:c9:8b:c3:5b:43:5c:dd:36:86:d5:43:bd:
b8:4d:99:3e:9d:24:3d:d2:f4:51:2c:f7:c5:a8:b2:
42:f9:8f:7f:e6:0b:21:a9:a9:b1:a0:00:f8:29:2c:
d2:aa:74:89:27:f5:8a:60:ae:82:e7:a8:fc:e3:09:
2d:7f:02:a9:93:64:d3:7c:cf:f5:7a:45:ac:73:b8:
2f:d6:fc:b3:43:81:e9:bb:8a:dc:90:c7:37:6b:c6:
67:da:15:7b:3f:d5:63:18:4d:8c:81:39:14:a6:0c:
89:f8:6f:0a:65:23:a0:2c:6f:17:bf:96:30:88:1b:
e1:36:22:ed:6a:ca:b0:17:d3:23:3e:d1:a9:b5:cb:
e6:bb:5c:c9:72:68:32:2f:c4:76:4e:12:41:53:39:
2d:a0:72:28:f1:47:c2:77:87:5d:21:47:87:8b:88:
7a:b0:23:da:cd:91:78:c7:17:f5:a8:29:5c:e6:49:
32:32:ec:cb:66:28:6b:b0:d9:2c:1d:95:b2:ec:7c:
85:53:71:e1:1b:b3:98:04:55:ac:be:14:0f:28:0a:
1b:45:dc:3c:1b:52:13:c9:aa:fd:c6:ed:5b:53:c1:
d7:92:7c:71:11:eb:4e:b9:7d:f1:1a:35:e7:de:26:
bf:4e:8d:9d:20:01:7f:ff:e7:5b:f2:25:df:0d:38:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4E:43:8C:E2:0E:4D:5B:05:3B:21:08:72:A0:B2:C6:9E:A9:A9:F2
X509v3 Authority Key Identifier:
keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:be:61:f9:d9:f4:ba:76:2d:05:e4:1f:e9:07:ae:49:53:
ad:e2:45:03:70:36:ae:2f:a7:a0:99:aa:5c:bc:e5:05:08:4e:
f1:7d:66:ad:7c:81:8c:fa:d9:c5:46:03:e2:8c:14:c2:20:3c:
cc:74:3a:a7:18:b3:93:1f:41:8a:e2:df:18:4a:8e:51:cb:42:
52:96:16:8e:da:10:b1:01:5a:3c:88:a9:b2:ab:ef:94:b9:2a:
96:bb:b5:b6:e5:ee:d1:21:35:21:1a:8b:9f:8c:6e:06:26:fe:
c9:26:70:89:9e:1d:7a:b3:02:e1:c4:94:37:79:95:f6:44:9e:
ac:19:7f:7f:e0:4b:39:8c:6e:cf:86:dd:64:87:57:aa:d9:d1:
7a:55:fb:7f:2b:e9:32:69:5c:12:72:83:0b:a9:73:12:86:da:
35:c4:6a:d7:fc:f1:12:5e:b5:08:00:a4:d0:e0:54:3d:fc:2f:
76:08:e6:f4:a0:b7:13:12:6f:fb:1d:07:75:f1:ff:b9:98:1e:
7d:26:57:f5:ab:27:a8:e4:5f:2f:fd:a9:90:9d:2b:e0:9a:35:
6c:52:82:5e:c5:02:ac:3a:7b:b5:42:eb:ec:4d:44:3b:89:c4:
94:04:10:d8:cb:3b:91:d6:cb:95:84:36:aa:ee:93:59:94:27:
09:df:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:45 2025 by rpki-client