Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: ZMvRLnljE656IRTI4JtpNrsU3fF6b6WDumM0z9nGIIc=
Subject key identifier: D0:5F:5C:8C:95:7C:08:B5:2D:16:77:35:A5:05:75:68:2E:B3:04:C2
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 01987298D7C95CDBBCD743DC9CD0A3D6F72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 11B9
Signing time: Mon 04 Aug 2025 01:01:15 +0000
Manifest this update: Mon 04 Aug 2025 01:01:15 +0000
Manifest next update: Tue 05 Aug 2025 01:01:15 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: JZHgvh1Jsx2AA4mL3sDNgN13ICqppg/qzP6h093wuaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d7:c9:5c:db:bc:d7:43:dc:9c:d0:a3:d6:f7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Aug 4 01:01:15 2025 GMT
Not After : Aug 5 01:01:15 2025 GMT
Subject: CN=d05f5c8c957c08b52d167735a50575682eb304c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:4a:ba:a9:d5:84:0c:74:d5:60:f0:92:6c:
44:28:c0:eb:47:63:e3:84:2a:1e:ba:b7:df:ea:11:
9f:88:ff:5e:4b:e1:22:c0:b4:8e:c6:bf:a7:35:f3:
25:80:fa:cb:49:50:20:f8:a4:45:fd:b5:1d:fa:77:
5d:43:eb:80:7e:bc:2f:39:20:55:d5:f6:df:2c:1b:
d7:91:0f:86:50:52:03:f4:3d:ca:0f:ac:f7:33:94:
29:2c:ad:21:fc:4f:06:12:c8:f9:10:83:1f:04:36:
b8:16:b4:7d:cc:a9:58:61:09:50:71:cc:42:8c:d9:
d9:52:4b:a7:dc:9a:1b:22:7d:1b:b5:82:6e:0f:ee:
f7:d6:e1:fe:2c:ce:0e:fe:ec:f6:28:06:f0:43:e0:
a9:8a:c7:91:9f:c9:de:8a:03:83:a7:a6:eb:ad:28:
cd:75:78:9e:69:8e:23:4c:ed:00:07:48:8b:27:77:
17:99:34:59:ab:b7:73:dc:5f:8b:b9:57:57:1d:db:
75:8e:af:81:79:4f:55:da:3f:92:ff:8d:71:a9:85:
5e:84:02:69:39:49:43:63:65:3d:77:4a:4d:f0:ee:
3e:55:b4:fa:58:a8:8d:e3:12:f6:71:af:49:e3:bb:
98:52:a0:21:c2:42:55:56:c6:19:3d:5e:68:63:49:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5F:5C:8C:95:7C:08:B5:2D:16:77:35:A5:05:75:68:2E:B3:04:C2
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:ad:ab:03:c1:04:45:46:b4:07:d4:eb:fb:11:a0:91:cc:ed:
69:e8:d0:3b:0b:b7:13:4a:4d:d7:65:73:11:84:d0:17:21:fb:
97:a5:ef:46:cb:58:af:f5:58:ee:b8:32:a5:74:b0:be:43:3d:
86:79:c4:ca:b3:59:a5:7c:91:f7:73:19:9e:d9:7f:17:c1:b5:
ac:38:17:b1:be:19:d4:cf:f3:b7:2c:31:10:e7:f4:09:0d:25:
7a:f8:ed:69:c8:a9:67:83:06:94:39:d7:75:92:29:7f:1f:1b:
e9:cb:71:32:73:67:63:84:52:67:2e:e2:0f:a2:0a:e2:13:d4:
35:0f:cc:b7:72:c0:27:c5:94:13:28:6f:0b:87:01:57:ca:1b:
9c:5d:84:b8:f6:ef:c7:07:fe:31:5c:9d:98:1a:06:01:6d:c7:
41:9d:39:38:70:e5:d9:0e:7c:e3:62:58:1b:8c:07:28:98:18:
f2:7d:9c:31:ba:43:3a:c3:dd:81:4c:36:a5:57:76:92:65:97:
0d:4d:a4:34:3c:c9:92:07:44:56:df:97:fa:f0:0c:65:d1:da:
0a:e1:10:75:ac:05:17:01:99:b1:c6:1e:54:fb:8e:af:05:cb:
13:f1:6c:1b:e4:1a:8a:dd:d5:78:25:03:19:76:11:f9:1d:29:
67:eb:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:01 2025 by rpki-client