Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: 7tK+n4M/yLCtwVWIfdV/o5I3vJvpfo7+DxaH5Q/lobU=
Subject key identifier: 4C:C8:F6:48:88:11:B3:7F:6E:AE:D4:57:F7:9E:08:93:F4:C6:C2:BE
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 01987DF7D0FD36A16B2FE3A52337E96E898B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 0499
Signing time: Wed 06 Aug 2025 06:00:49 +0000
Manifest this update: Wed 06 Aug 2025 06:00:49 +0000
Manifest next update: Thu 07 Aug 2025 06:00:49 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: BSkmU6rN4J1mguHFeN8ByHFAx0HW49IdFfiKlzqKxjg=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:d0:fd:36:a1:6b:2f:e3:a5:23:37:e9:6e:89:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Aug 6 06:00:49 2025 GMT
Not After : Aug 7 06:00:49 2025 GMT
Subject: CN=4cc8f6488811b37f6eaed457f79e0893f4c6c2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:0f:0e:7a:0d:8a:a2:78:69:f3:01:bc:59:
d5:ef:12:de:08:6d:90:48:e9:50:2a:c0:fa:fd:fe:
17:89:a8:96:43:60:ac:b0:cc:96:81:15:fa:e8:dd:
45:75:86:55:7d:f1:6e:62:c9:d3:49:ca:17:b6:b3:
a8:d4:53:d2:dc:5b:6a:64:b8:aa:b1:0a:bf:75:cf:
de:25:2d:b1:33:e6:c3:ec:b3:ad:54:4d:c7:34:b3:
41:75:21:cf:ab:e3:ca:b7:ff:07:64:1e:e0:d8:e0:
76:95:6d:23:95:7b:a5:65:40:34:88:68:16:3a:64:
f3:26:f3:e8:e7:6e:24:0d:f1:21:19:f7:7c:6a:1b:
a6:b0:c1:94:7c:b3:f7:7b:c1:e7:27:2d:bb:2d:94:
60:f0:4c:e6:b5:3b:5c:e7:19:b1:16:28:c3:4f:a7:
68:6f:47:a1:06:48:5e:00:9c:b2:95:c3:72:a6:c2:
3a:60:93:d8:d4:fe:6f:d5:ec:18:bd:17:d6:fd:51:
63:ab:f5:13:ac:4d:27:84:57:96:cf:5d:be:35:31:
da:06:b7:72:44:fb:fb:2c:db:78:32:c1:d6:18:69:
39:74:64:17:29:39:07:cf:03:2f:f2:4e:2f:20:03:
38:26:c5:fe:b1:b8:44:d4:be:dd:b7:89:29:20:69:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:F6:48:88:11:B3:7F:6E:AE:D4:57:F7:9E:08:93:F4:C6:C2:BE
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:ba:f2:89:35:e7:b5:42:f0:01:85:32:0a:c6:68:25:52:
e2:fe:e3:16:36:77:76:b8:52:c4:a0:6a:36:75:55:08:ac:7c:
a9:cd:0d:59:ab:ab:7e:b4:d7:29:fa:70:7a:ee:80:06:3f:b3:
51:9a:3f:23:f4:f1:f2:f0:70:e2:04:e3:f3:d0:ea:da:c7:90:
8e:a0:c9:7a:cd:56:60:15:f8:75:08:63:36:2e:98:b9:11:3b:
3d:48:21:cb:1f:d6:73:dc:84:c5:e3:bc:7b:50:0b:dc:aa:13:
09:0d:f4:08:26:ff:52:e0:a7:fc:ae:b0:74:31:36:cb:f9:da:
2a:2c:15:7b:21:86:be:4a:32:08:a4:6a:6c:db:01:08:3e:5a:
86:83:83:11:76:dc:3e:7c:af:fa:77:3c:be:c7:aa:fd:1e:56:
22:75:14:e0:dc:46:e9:69:75:0a:6d:fa:d8:84:2e:82:ce:84:
f8:57:20:ad:a1:60:59:ca:68:fe:0f:86:23:39:da:e0:b8:81:
0d:89:c7:8d:b3:a6:1d:58:b1:1f:5f:45:93:7d:6e:b5:6c:c2:
36:0e:f0:44:41:8e:9e:8e:55:4a:2d:83:5e:25:33:37:a6:ae:
ba:89:54:e6:1a:31:1a:59:a8:6f:e2:02:4f:27:50:4f:9b:f1:
cb:49:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:46 2025 by rpki-client