Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: WU/R5GEetywaa1fZoNR/YNviRRAWIJq/G8x/bbqu6H4=
Subject key identifier: AB:B3:55:4A:EB:13:B3:64:50:91:16:4D:9F:FC:B1:31:5F:FE:5C:B1
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0198744FE2E131D56F045859312AF40BCE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 10E7
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=)
2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: yv42CTU3iL91tk1Ez94BDKVf/WdqMKD63YOuHYd0fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e2:e1:31:d5:6f:04:58:59:31:2a:f4:0b:ce:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=abb3554aeb13b3645091164d9ffcb1315ffe5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:06:13:0b:c9:6f:82:f3:ff:8c:bb:45:fd:
7b:bf:8d:0f:5d:70:af:57:19:6b:c9:92:97:5b:a2:
13:3c:82:80:4e:fe:84:38:cb:60:ea:51:29:68:02:
3c:3a:52:7a:6f:45:4c:f9:3b:18:10:ed:a8:70:30:
05:8a:3f:38:b1:ba:83:79:56:e6:a8:33:d6:c3:58:
c3:63:4c:cf:74:f7:41:58:64:96:30:05:0e:a0:8f:
29:e4:96:7e:d6:35:72:89:13:ae:ee:f6:27:28:7e:
f5:e3:1c:b4:95:71:2b:09:b2:c8:e9:98:60:6c:16:
66:ab:b5:07:c4:fe:45:7e:73:0e:48:b8:fd:95:9b:
fc:3e:5e:b6:c7:8d:a4:3f:c2:f2:69:29:5d:72:8e:
7a:1d:29:1e:c8:7e:2a:2c:21:a8:01:bb:77:32:81:
86:20:7d:d8:11:8d:a4:b6:e0:f6:d5:fe:e6:eb:1f:
2d:ad:e2:79:ed:a0:b2:17:d0:ec:b6:e1:26:d9:b7:
76:8c:15:d8:25:e3:ef:f5:6b:00:48:ec:17:9c:12:
c1:d5:c7:16:7a:34:bb:4b:59:00:dc:93:94:9e:16:
0f:e1:ef:c3:97:a0:ab:50:c2:75:75:6f:55:36:38:
86:8b:a6:89:89:d8:fa:97:1d:0a:0e:a0:f9:53:54:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B3:55:4A:EB:13:B3:64:50:91:16:4D:9F:FC:B1:31:5F:FE:5C:B1
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:64:23:cb:a0:67:d9:ca:d9:b5:99:4a:e1:da:56:4a:cb:78:
ef:c0:3e:8f:9f:b2:01:52:d9:06:4e:bc:0a:ff:2f:ce:e3:34:
3c:e1:09:ef:de:e3:c7:44:5d:1a:0b:54:73:d2:20:5a:2d:c2:
0f:cb:3f:1a:1e:8a:8d:ec:38:61:e9:dd:aa:7d:2a:71:21:9d:
bf:a1:65:58:78:bf:8f:b0:00:31:7f:93:4a:54:2e:58:ce:93:
28:7d:d1:ae:64:42:a5:57:25:4b:32:22:9f:91:51:71:29:e0:
25:94:5a:97:8c:24:88:40:c2:4f:98:19:bb:ec:8e:7e:c9:57:
cc:96:e7:46:36:c3:cb:92:fc:46:f2:10:26:23:6d:ef:93:ff:
c3:9e:dc:bf:ec:29:e6:e3:24:bc:18:c9:8f:f0:2f:ad:9f:89:
7f:a0:67:3a:f6:ae:8c:d1:10:84:f1:25:48:48:5c:c2:52:5b:
10:62:1b:e0:f8:29:2a:84:49:61:60:2d:d0:e4:23:f7:67:76:
d7:f9:e2:52:6e:57:f8:cd:7e:d4:82:31:45:d9:23:89:09:92:
2e:d4:24:f5:85:40:b7:ee:32:5b:2c:22:9b:26:b8:c5:c8:64:
e3:18:b6:d0:ca:40:6c:a7:dd:7f:c3:13:24:14:c9:a9:d6:88:
ed:1c:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:15 2025 by rpki-client