Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: 94/zrWxBGgCuyfveq/0Ihqb3KYJRqFMQTzYN/c/dhak=
Subject key identifier: 91:BF:C8:9E:F0:58:3D:95:51:87:C4:20:E2:B7:BC:86:09:B9:FB:43
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 01987BD2A02190F1D8BC2B07FF04C8539C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 090C
Signing time: Tue 05 Aug 2025 20:00:57 +0000
Manifest this update: Tue 05 Aug 2025 20:00:57 +0000
Manifest next update: Wed 06 Aug 2025 20:00:57 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: l582Dn6Zz3xVY89oPzKL4Ul66M0FOeYTKbdzRe9mPK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:a0:21:90:f1:d8:bc:2b:07:ff:04:c8:53:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Aug 5 20:00:57 2025 GMT
Not After : Aug 6 20:00:57 2025 GMT
Subject: CN=91bfc89ef0583d955187c420e2b7bc8609b9fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:3c:12:33:18:c1:c3:b7:19:73:c8:f4:4f:
1e:c0:a0:4f:e6:8d:b7:25:93:db:b1:8b:5e:16:1a:
b6:2e:ad:6b:99:db:20:b5:16:5b:0a:66:59:c2:05:
b6:b4:10:cd:ad:8a:ae:81:c4:ce:27:57:11:23:05:
a9:89:11:3c:6f:3f:15:29:1d:b6:ed:48:72:02:f6:
a0:53:7f:a6:4b:e1:5e:66:8c:19:b1:c6:85:19:34:
45:ec:7f:18:06:64:f7:fc:79:d4:c6:04:24:cf:80:
e4:c5:c2:c8:f4:cd:dc:7d:f8:98:98:f7:8b:7c:d5:
2e:d2:07:63:6c:0e:a1:75:0b:c0:2e:e9:72:f6:5e:
38:85:51:5e:01:9c:d0:b1:37:7d:b8:6a:36:14:26:
b4:41:21:c3:fb:dd:b2:ef:15:3f:b9:42:f8:f0:be:
34:01:aa:0c:be:d6:a4:c8:b7:b6:04:fc:e2:70:ad:
e5:50:04:54:8e:21:bb:95:a5:94:16:62:ea:35:ee:
b2:1f:76:3c:7f:57:bc:23:0b:67:47:8c:a1:e4:b0:
bb:e8:09:45:b9:5e:2c:af:dd:46:20:d0:40:fd:b5:
0a:3a:6d:7d:85:c8:27:75:23:ac:c0:55:c2:9a:cb:
86:c8:75:48:d6:93:a5:ad:86:82:14:67:0b:b3:14:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:C8:9E:F0:58:3D:95:51:87:C4:20:E2:B7:BC:86:09:B9:FB:43
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:b4:e2:18:51:26:dd:bc:a6:e8:1a:cf:98:b2:4f:16:0a:
33:fc:ae:50:47:16:e6:83:7c:d1:a5:89:76:3b:a1:7e:74:83:
47:9a:57:9a:54:0f:bb:77:9a:cb:3f:1a:0c:d3:d6:60:15:da:
f9:a7:73:f7:72:09:b1:77:64:92:d8:8b:57:fb:5a:ba:17:96:
4f:29:6a:4a:66:1e:61:d6:34:d9:c9:40:67:b1:ab:37:3b:80:
4c:dc:6e:85:c7:49:31:3f:ca:27:29:da:39:94:51:bf:3b:88:
97:30:56:fc:e8:4f:ab:32:2d:83:0c:95:97:ed:a7:c7:6c:ea:
37:41:2d:60:b6:25:0e:fc:c9:43:bd:87:87:a8:08:cb:8c:47:
43:97:de:57:3d:8f:51:71:96:cd:af:f8:73:40:26:b0:60:53:
2d:a4:07:6d:1f:b2:35:e0:bf:c0:ae:a4:b4:e7:00:65:1b:8a:
9a:f5:31:5a:a6:5e:f9:c3:f2:2b:e9:6c:6a:6b:ba:5c:6f:d0:
75:b5:c1:b1:fc:6c:79:b2:67:eb:15:b8:2f:13:31:de:3e:4f:
c0:14:de:17:57:d0:89:bf:25:9d:c7:7b:cf:ea:2a:f1:d1:14:
29:97:2f:ec:21:64:89:a9:15:7f:69:65:97:c6:67:d1:da:dd:
5c:e7:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:39 2025 by rpki-client