Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: nY8eJD5RM/ott1WrEs39e5t7RoXcZDSRajoiRhSYUJY=
Subject key identifier: F0:F0:F4:C5:38:C4:92:72:82:19:94:CE:8E:B9:A2:2E:D8:13:2E:28
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 01987298BF75C3B9A3FE20CF9813B175FE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 1171
Signing time: Mon 04 Aug 2025 01:01:09 +0000
Manifest this update: Mon 04 Aug 2025 01:01:09 +0000
Manifest next update: Tue 05 Aug 2025 01:01:09 +0000
Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: Ez6xGlbug6KKERag9Q6NZmrFuYqmRGb+k5ZJetHQwww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:bf:75:c3:b9:a3:fe:20:cf:98:13:b1:75:fe:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Aug 4 01:01:09 2025 GMT
Not After : Aug 5 01:01:09 2025 GMT
Subject: CN=f0f0f4c538c49272821994ce8eb9a22ed8132e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:ab:cc:d6:65:6e:f5:40:64:35:0f:4f:44:
62:b8:ae:6d:31:33:d0:64:9b:12:54:0d:93:f7:a2:
32:b7:70:86:53:67:4f:5a:4b:6e:c5:f8:f3:e0:85:
46:85:fb:b3:92:ef:ca:56:be:f7:e9:87:68:88:6e:
9b:c1:38:71:c2:0a:6b:a8:87:16:00:ea:65:5b:a9:
ad:5d:51:3d:dd:5a:0b:96:35:91:81:3d:78:76:90:
ea:f7:44:cc:ff:07:44:14:61:2a:a6:4c:0d:53:a6:
00:fa:aa:04:66:56:6b:f6:12:04:6b:10:21:d6:da:
16:6a:30:9e:24:d7:44:b5:e5:6d:23:1f:4f:ff:81:
39:d4:07:5f:ca:d0:4b:c1:e4:9d:a7:c0:ca:c7:56:
86:07:ef:82:b8:77:53:3e:5b:f7:f7:f6:c2:cc:2e:
50:21:d9:95:ae:ab:09:e1:ff:33:bd:f9:89:63:8b:
6d:f6:32:e4:6a:4c:27:69:66:13:32:45:49:53:b6:
91:68:da:91:ec:4b:61:3a:49:04:3e:ca:e8:f5:63:
ac:8c:1b:0a:5f:70:7f:ec:67:66:ef:aa:63:e2:0f:
35:35:06:ce:ad:ff:e7:6d:58:be:00:8a:89:c3:1b:
ee:3e:1e:1f:5d:91:b0:73:0d:22:3f:e2:2a:e7:f3:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:F4:C5:38:C4:92:72:82:19:94:CE:8E:B9:A2:2E:D8:13:2E:28
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c7:5f:b3:64:e1:3f:41:87:a3:1e:ae:4e:14:e3:69:91:ce:
b1:44:3a:1b:2f:dd:b1:df:a8:7e:31:f5:90:03:3f:c0:39:35:
cc:b9:ed:72:5d:ea:67:50:aa:ea:4a:f8:31:c0:d7:4c:d2:73:
7c:ab:73:95:2b:eb:9d:0b:47:95:4a:b7:c2:18:af:21:ce:e8:
63:cc:16:98:4b:ba:b6:61:f7:11:7c:7e:77:ac:2e:50:00:40:
35:40:28:99:33:68:d8:54:d7:11:d6:10:56:7b:c2:79:de:45:
2d:dd:20:b6:98:df:18:ea:e5:f3:0f:f3:58:a0:b2:b0:23:c5:
c0:dd:61:70:29:de:ea:2f:28:5f:94:cd:d3:ed:82:5d:22:d7:
22:f9:2d:7f:9d:c8:10:cb:72:bf:8d:89:65:94:1b:39:ff:4d:
02:32:d2:36:18:73:43:3c:05:6f:ee:fe:27:7f:a6:c9:f1:e5:
d6:de:10:2f:52:7a:4b:70:13:e9:d4:ab:7e:5e:4d:de:48:15:
5c:74:3a:9c:0b:59:cf:8f:35:a3:bb:51:7d:91:f7:f6:01:26:
cb:e9:5b:85:2b:e4:62:31:d1:72:c3:a8:c9:c4:80:88:33:f5:
fc:a5:8e:b1:cc:3c:a0:f5:f3:db:b2:c5:1a:0a:59:95:9d:c4:
0c:d8:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:04 2025 by rpki-client