Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: 6jiJAn2kLEQiqByUtVvu6LGMpbwf1A6q+YvLpE5fAuE=
Subject key identifier: 8E:ED:DF:83:F2:2D:F8:22:ED:92:A2:2F:6B:90:3D:85:E0:D2:C2:8A
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019885B174D64BC50832E72350B44E6DACCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 08E1
Signing time: Thu 07 Aug 2025 18:00:56 +0000
Manifest this update: Thu 07 Aug 2025 18:00:56 +0000
Manifest next update: Fri 08 Aug 2025 18:00:56 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 8MdFPBFz8eLSCNStkI2ktdyeTxde6oPUIbv5quHFfmQ=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:74:d6:4b:c5:08:32:e7:23:50:b4:4e:6d:ac:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Aug 7 18:00:56 2025 GMT
Not After : Aug 8 18:00:56 2025 GMT
Subject: CN=8eeddf83f22df822ed92a22f6b903d85e0d2c28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:74:7c:40:41:58:a8:52:67:e7:cf:1b:b6:
ff:36:2f:bd:e2:a1:56:ac:d2:b0:47:4a:8e:46:9a:
ba:38:02:ed:d9:33:f4:8f:ae:a4:65:a1:15:c1:1d:
11:0a:09:8d:76:a2:0a:49:07:c1:66:dc:3e:8d:cf:
26:a9:78:a5:ed:cf:67:ad:f2:01:25:5d:04:21:3e:
b9:f7:80:cf:f5:49:13:cb:1e:43:c5:c4:28:39:fd:
3b:17:05:68:fd:8b:86:4f:7c:3a:57:f5:ff:32:7b:
26:04:6b:c7:ff:23:3b:47:bd:a1:5c:43:4c:88:a6:
1b:26:e2:14:44:0d:86:16:b5:ce:6e:d7:5d:7f:62:
bb:09:be:1e:6a:c8:bc:e2:0b:a0:22:2f:91:44:46:
6d:ca:50:f6:c9:5f:6e:4f:d5:8e:0a:c3:b7:7c:3e:
13:55:73:55:64:65:33:f5:ad:2a:7c:50:b2:dd:fa:
ad:d0:54:22:20:20:38:28:73:95:7c:c4:f9:5c:f9:
68:15:18:32:3f:e3:13:11:ec:c8:5d:49:55:9c:08:
b9:33:2c:bb:ee:d9:68:fc:6c:7d:44:08:40:06:16:
24:c2:94:87:bd:ef:93:84:1a:61:ca:49:17:2a:54:
e9:76:62:19:a7:74:04:24:fc:54:2c:13:98:3c:7d:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:DF:83:F2:2D:F8:22:ED:92:A2:2F:6B:90:3D:85:E0:D2:C2:8A
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:71:a8:a0:e5:7a:8f:22:6e:42:de:1f:37:bf:46:7f:6d:a2:
a5:4a:8d:2b:46:c3:65:59:cf:05:af:0c:93:b8:63:3e:e6:a5:
ea:09:62:53:61:86:f6:fb:19:75:fb:8d:ef:86:62:e3:f0:cf:
ae:e1:25:c7:82:f4:67:74:10:0a:5d:21:be:7e:3f:44:ba:a0:
58:75:e5:e7:17:69:e9:2b:00:cc:2d:4c:b5:a2:f0:2e:24:92:
17:b8:07:a4:3a:c4:16:c1:1b:b6:cc:04:b4:a2:ac:18:b9:88:
da:eb:7f:a9:e8:99:1e:39:6c:4b:a2:48:a0:32:18:3f:49:35:
32:c9:fe:00:09:36:ed:86:b0:36:82:f0:9b:79:4f:fb:b6:42:
60:de:a8:f5:cc:47:17:56:01:28:19:2a:3b:b4:87:2c:82:4b:
6f:64:10:f8:e0:35:cb:e9:04:d4:5b:05:a9:a1:ac:d7:8d:51:
23:cf:0c:91:ce:ac:bc:50:38:c1:4f:d8:27:15:e3:ac:e9:ee:
e8:99:dc:60:7a:52:33:eb:a1:66:07:47:8e:e0:1e:9e:bf:b7:
20:0e:12:d1:5d:51:12:19:c1:b2:69:45:15:ad:ab:f4:59:4b:
97:4d:1b:73:63:63:03:9a:46:ce:ca:16:85:a0:6a:b6:d6:51:
ca:e3:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:38 2025 by rpki-client