Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: BYNfGgW4N5l/La0WSTfyguZZwx3SNNC0GLM5baeclT0=
Subject key identifier: 9B:73:C8:D8:92:BD:1A:63:2C:47:48:79:DC:6B:B7:5B:F2:99:BE:65
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 01986093B795670EE05460ECEF26BB78C3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0C60
Signing time: Thu 31 Jul 2025 13:02:30 +0000
Manifest this update: Thu 31 Jul 2025 13:02:30 +0000
Manifest next update: Fri 01 Aug 2025 13:02:30 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: V0WvZ+lfeQi7U//3F9pLo2amsOMqkrAWmc7p8eJX9Ro=)
2: T2qZTTFWVSNBNeXqRrv5AJne1B0.roa (hash: EWp0bMjXe6eEnMu430F2WwTP+lMlXpj/M+oOz9ex/1k=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:93:b7:95:67:0e:e0:54:60:ec:ef:26:bb:78:c3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jul 31 13:02:30 2025 GMT
Not After : Aug 1 13:02:30 2025 GMT
Subject: CN=9b73c8d892bd1a632c474879dc6bb75bf299be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:f1:e7:0a:30:d0:59:af:5f:47:d1:33:5e:
aa:25:53:c1:a9:48:22:ac:81:18:5c:ad:d7:49:d8:
f0:5b:e7:65:c9:2e:80:88:88:fb:42:d8:61:fe:e9:
f3:6f:e3:f3:97:fc:f6:da:55:16:99:a8:ba:78:51:
02:f4:f8:8a:ed:b9:56:e4:8d:5c:2f:ab:b4:96:d6:
86:f6:7c:20:ff:09:04:2c:6b:44:66:59:9e:b3:5b:
b1:9b:0e:c2:e2:e5:62:11:25:81:61:47:71:58:b4:
bc:fe:dc:e4:9c:99:7b:a6:a2:1e:15:7a:a2:51:c4:
a4:13:ee:33:b3:11:28:d5:f0:96:64:cb:9b:fa:c6:
82:44:c2:8e:b8:d2:0d:d3:6f:34:b2:cb:5d:36:a8:
9b:a5:90:88:18:f1:24:de:99:71:49:95:55:de:ff:
93:c8:c3:1f:da:45:be:d4:7c:8f:96:ca:e6:27:1d:
93:10:c8:6e:c4:0e:ee:d9:40:69:a3:49:08:38:1c:
66:73:28:f4:fe:2b:91:15:9f:09:da:06:b5:7e:01:
92:98:2f:8f:20:bb:cd:96:2e:17:9b:58:83:f5:8a:
d7:46:f6:e7:05:af:7d:a6:cd:ef:4c:75:c4:d3:39:
d6:28:cd:85:2a:fe:e2:53:47:d6:b9:5b:41:16:9e:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:C8:D8:92:BD:1A:63:2C:47:48:79:DC:6B:B7:5B:F2:99:BE:65
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c1:81:c9:8e:72:59:76:b0:c4:6c:1b:94:fe:af:b0:54:47:
76:7e:72:ff:92:60:61:89:ee:8a:da:ca:e8:40:41:c7:68:f3:
a5:6c:b2:3c:42:c5:74:89:99:a2:59:4d:8d:5c:d0:96:d0:16:
32:cb:0c:95:0f:90:0c:a4:1d:71:f6:6d:88:d5:ee:83:78:86:
50:7b:45:f9:ff:0a:c0:4c:6b:ea:08:eb:af:9a:34:0f:ed:87:
6a:5b:0b:72:91:e6:57:1d:e0:2d:67:c8:36:99:78:a8:34:d5:
05:b3:49:bc:55:b5:0c:da:e7:27:35:01:91:00:7a:8e:64:ff:
42:e4:59:d5:b7:ad:7d:ed:db:77:73:c3:75:b9:d9:0b:a9:7e:
17:33:99:46:ae:02:00:5e:d1:e6:4e:f1:c2:c4:bd:7a:8b:a9:
98:a1:68:07:8d:d7:06:db:71:67:d8:f4:55:7e:13:48:dc:25:
56:0c:69:d0:9e:7c:ee:bb:78:24:47:3b:24:40:cc:05:d7:59:
9e:d3:a8:60:50:b3:54:7f:eb:89:0d:84:6f:94:c9:50:90:4c:
88:5a:a3:09:a9:0b:46:2d:95:cb:25:0b:1e:35:b6:00:97:bb:
3d:02:56:3e:db:7f:83:ac:1c:4e:ef:08:f0:fc:e8:95:1d:e4:
fb:83:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 18:10:00 2025 by rpki-client