Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: 16ry2Aa+l3yLsyQajrFXoLoDvVku502HT+dOK1SvtQU=
Subject key identifier: 3F:04:4C:2C:FD:7D:DF:50:98:A3:53:7D:17:20:D5:67:06:D9:24:C3
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 0198868CF67C80473D8D65127DBBFA889762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 22:00:41 +0000
Manifest this update: Thu 07 Aug 2025 22:00:41 +0000
Manifest next update: Fri 08 Aug 2025 22:00:41 +0000
Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: ixvbST+HYpAecmg1NKAlqm4ZpArgtU5Z3PdP5hc306A=)
2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:f6:7c:80:47:3d:8d:65:12:7d:bb:fa:88:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Aug 7 22:00:41 2025 GMT
Not After : Aug 8 22:00:41 2025 GMT
Subject: CN=3f044c2cfd7ddf5098a3537d1720d56706d924c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:f4:78:79:7a:4d:28:25:2a:1f:62:1b:bd:
c4:1c:fb:00:a3:4a:57:96:49:a3:dd:2d:c5:10:93:
d9:36:64:d0:bc:18:e9:9a:bc:21:8e:10:66:35:2e:
c4:d5:61:d0:46:09:66:48:f8:4f:25:9d:0e:8f:d9:
d4:1e:03:b7:56:91:69:9f:ac:93:47:d7:b3:65:c8:
b4:98:77:5d:ea:42:13:5a:bc:95:21:cd:1f:ea:ad:
89:a4:ed:a7:09:9b:1a:46:e4:19:27:53:9b:f3:1c:
a8:3b:7a:b3:46:8b:00:5a:87:2b:e3:bd:f0:74:77:
3b:80:ec:45:7d:dd:d4:e8:92:9e:df:aa:06:af:5d:
3b:51:6f:c2:b7:b2:26:93:03:4f:f6:25:0e:a5:68:
4e:48:00:78:9a:49:82:b5:ef:f2:27:3b:da:fd:28:
a5:20:81:56:db:f2:b4:b4:1b:45:f8:53:a0:3f:3f:
5a:a4:a6:76:d4:50:55:85:1d:91:54:13:ef:9e:da:
66:4c:23:47:ce:7d:b9:9b:ec:1d:70:7c:22:d9:47:
6f:55:0d:61:b2:b8:0f:a1:6f:50:f3:c8:0b:18:cf:
39:4a:b0:25:18:c0:30:fd:0e:a7:d4:8f:00:2b:5c:
49:51:91:e2:2f:4d:c9:40:29:a6:5a:96:d1:0c:54:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:04:4C:2C:FD:7D:DF:50:98:A3:53:7D:17:20:D5:67:06:D9:24:C3
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:62:0f:98:99:2b:2f:bc:9d:fb:f8:25:dc:a4:32:ba:7d:f7:
1b:e8:a9:22:d6:dc:14:c0:1c:ec:19:5a:16:2c:31:f2:ff:2d:
91:81:1f:5a:73:d1:77:c1:32:48:4a:22:27:b0:b3:c5:c8:ab:
89:60:e2:13:97:5c:6c:6d:89:a1:9b:3d:02:1a:c3:43:f6:bf:
95:41:67:c3:83:1c:d0:0b:3f:e9:83:58:2d:65:4d:0f:55:e1:
83:c7:da:1e:e3:20:63:1d:81:65:7b:5e:79:53:d2:06:7c:67:
e2:b9:49:3d:74:cf:77:75:4b:dd:10:20:d9:07:98:37:3d:db:
1b:44:4c:02:dc:38:bc:23:2c:50:7b:da:e3:ea:ad:28:73:04:
2e:6e:7f:4e:cc:c2:59:90:41:0b:c0:20:ce:fc:54:c6:3a:81:
a5:95:f2:74:62:39:ff:ba:c8:50:88:35:fe:be:2f:c7:5d:3a:
27:fd:6a:3f:a2:32:f4:39:01:a9:f2:98:cd:93:66:99:54:9a:
09:50:6e:6a:d3:43:00:c8:ae:25:d2:52:9d:df:51:a1:1c:ed:
7f:39:22:d7:d9:7d:95:44:06:c6:34:40:e3:d2:63:99:83:9f:
1a:dd:0e:49:90:fe:72:51:3a:0b:42:88:23:21:1f:61:b9:4a:
6b:f2:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:11 2025 by rpki-client