Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: h6WeXp5lgJVDRg3P6Bz+2ZZxmSZR8Mh+QLjmDVR7SPg=
Subject key identifier: C3:B1:AA:75:DF:A4:88:A8:06:75:B5:FF:87:96:6E:75:8F:46:8C:19
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01987418E747463E1C8DEDA6223B48E0B780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0B14
Signing time: Mon 04 Aug 2025 08:00:45 +0000
Manifest this update: Mon 04 Aug 2025 08:00:45 +0000
Manifest next update: Tue 05 Aug 2025 08:00:45 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: BeY8UcK3NBSeNOUagG+te3iwm16R2c1IDNAYjluZwHk=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e7:47:46:3e:1c:8d:ed:a6:22:3b:48:e0:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Aug 4 08:00:45 2025 GMT
Not After : Aug 5 08:00:45 2025 GMT
Subject: CN=c3b1aa75dfa488a80675b5ff87966e758f468c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:e0:69:6e:0f:57:3c:59:fc:ea:5f:e2:dd:
40:8c:0e:9a:fc:fd:f2:7b:90:ec:e4:c3:29:3b:fa:
84:e1:e0:2a:f5:4c:62:8f:64:c2:3d:1c:26:04:fe:
47:fe:db:ff:a8:5d:c4:58:23:18:c1:2b:91:cb:b7:
31:e0:a1:98:16:8c:0d:72:75:66:6c:35:7c:71:b4:
4b:a4:e3:1f:69:fd:82:2d:11:bf:0c:ee:fb:36:d8:
84:43:2f:2f:88:18:51:32:dd:b4:d8:34:9f:1d:3c:
07:d2:ac:1a:91:84:90:97:19:ec:88:af:50:b1:df:
00:4d:7d:3c:47:29:2d:4f:e1:14:38:d0:ce:e2:14:
f6:d6:60:f0:1f:30:1a:2d:66:48:93:eb:77:e8:d7:
34:2e:28:e2:ce:04:92:99:bc:ac:fe:44:ed:10:59:
f9:c3:a5:29:d2:28:b5:96:6e:57:74:34:2b:66:27:
f4:b9:4d:3e:77:8d:b6:57:cf:a1:d3:02:8c:9d:ec:
26:96:de:92:c9:49:41:ca:28:d2:9f:b6:bc:2b:ea:
d3:e3:e1:90:04:36:48:22:00:0d:28:73:22:ab:d0:
1a:4c:c3:83:cb:3e:04:9b:e4:c7:0d:06:a9:e3:54:
ed:fe:82:08:c8:13:1b:b4:2b:a9:43:0a:d0:0e:df:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:AA:75:DF:A4:88:A8:06:75:B5:FF:87:96:6E:75:8F:46:8C:19
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f1:0e:b2:1f:4c:aa:7e:47:b1:0b:a1:82:67:f8:63:79:22:
53:f6:01:0f:c6:29:cd:a6:bf:41:58:68:64:dc:b6:fd:2f:40:
c5:e7:dd:a7:b4:db:37:d2:d6:8a:64:94:63:36:9c:13:0c:6e:
01:04:89:bb:e1:37:cf:1a:47:ca:f9:4f:a3:5e:68:b1:49:5b:
94:93:0c:54:fd:4b:d6:f0:5a:1d:f7:f2:00:63:e5:eb:6d:78:
77:71:88:79:82:99:92:4e:ad:31:03:02:ca:b3:00:ba:40:9b:
a8:27:50:e5:68:2a:cb:10:07:dd:22:16:88:a7:b0:91:d1:18:
39:8b:99:9d:6c:1b:b3:32:0a:65:fb:8a:f0:86:40:99:28:2b:
fc:5d:61:4a:fd:45:0f:9f:70:b1:c4:fd:26:68:21:b0:52:22:
ee:3b:79:92:00:ee:cd:8b:55:e4:54:94:38:ff:91:f7:18:dc:
be:7b:94:bc:af:98:af:7b:2d:ec:10:ae:5f:25:7f:97:6c:dd:
54:d6:43:49:60:41:88:fb:fc:30:2f:23:0f:bf:de:9e:28:74:
1f:71:1c:ea:f5:da:8d:c4:f7:04:aa:18:cf:84:6e:ce:18:d9:
bd:be:17:55:be:ae:f7:bd:28:71:ff:62:45:13:c9:98:9b:28:
21:f1:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:45 2025 by rpki-client