Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: MQ92b2GgxiRIDR7dIR0qJTtcPsZCdiKQT86YT7kdgh0=
Subject key identifier: B0:AC:21:19:99:CE:6D:0F:63:5B:93:D6:AD:AC:39:2E:FB:46:92:10
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019872CFF862A43439764BA4F31033709699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 02:01:28 +0000
Manifest this update: Mon 04 Aug 2025 02:01:28 +0000
Manifest next update: Tue 05 Aug 2025 02:01:28 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: hPI//O+IeoYx8J3ebpz9r2Gwm7NDKBBoz/Y+Xi1F8Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f8:62:a4:34:39:76:4b:a4:f3:10:33:70:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Aug 4 02:01:28 2025 GMT
Not After : Aug 5 02:01:28 2025 GMT
Subject: CN=b0ac211999ce6d0f635b93d6adac392efb469210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:3b:68:34:c4:c0:11:08:d8:ca:9e:38:1e:
b7:79:6b:e9:d6:5c:0f:cd:7e:ff:25:45:be:a8:eb:
ab:f4:0b:db:e9:9b:80:b7:c2:ab:f2:72:20:f5:f6:
2f:30:62:37:21:1a:27:fa:aa:8a:e8:1c:c0:82:a0:
b9:a7:5a:15:81:0d:10:3e:f9:53:db:ba:87:2d:a6:
d8:7a:2b:58:98:6d:52:85:a0:8a:09:37:4b:e2:d5:
ad:36:73:69:0f:ae:a5:05:58:c2:03:b2:be:bf:47:
82:89:25:5a:b7:f2:00:10:5d:0c:e5:d9:04:d2:f5:
be:3c:7f:c7:8e:54:2c:1c:34:8c:56:2a:37:ae:47:
9e:69:6c:d1:4c:a4:62:c7:b1:bd:39:2a:a4:88:52:
9d:84:d8:65:9f:4a:06:db:56:98:93:5f:d7:40:cb:
16:c1:ab:8f:2f:81:d6:10:65:0d:d7:a7:24:8d:9f:
ca:47:e6:c9:ef:84:61:c4:ac:56:b6:c7:e1:6e:e7:
26:d7:cd:84:85:3c:53:84:c8:9d:33:0d:ed:9d:03:
2b:70:5e:9d:64:20:47:fa:f9:17:cc:b6:18:1b:b0:
fc:35:df:6c:7d:fa:88:99:f3:67:55:19:77:87:ae:
8b:f6:c1:cc:fa:ef:40:c9:6b:01:31:9e:fe:5a:06:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:21:19:99:CE:6D:0F:63:5B:93:D6:AD:AC:39:2E:FB:46:92:10
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:61:74:42:ee:5c:89:21:17:8b:21:98:88:d0:6b:ab:41:
cc:1d:e1:06:b3:b9:e3:e4:8a:4a:c3:1d:38:db:b3:9f:0a:a0:
c7:c0:30:27:7e:3b:94:f6:c3:da:11:ba:dc:78:93:76:26:d5:
0f:3f:32:d6:85:1f:c9:d5:c2:2b:ca:9b:58:bf:b1:6a:1f:1b:
49:e7:a4:63:26:44:e1:c4:ff:a6:74:54:35:0a:94:3a:f3:b2:
87:89:0d:8e:ba:b6:3e:3e:f0:ba:0a:19:07:ee:dc:e4:6a:ec:
6f:9c:c8:d0:31:33:f0:66:fe:08:03:b0:1c:09:44:dd:5c:c3:
84:47:53:b4:ac:b8:d6:63:08:3e:d6:cd:c6:9f:fe:6b:81:be:
cc:32:20:ac:51:72:74:22:46:91:1d:c1:37:d8:10:ed:ea:6b:
a7:cc:1b:02:09:47:65:a2:51:08:ad:76:71:01:92:ee:18:66:
59:63:c5:1f:b1:15:c8:eb:44:50:78:8d:a9:23:35:20:ed:41:
f8:f5:9d:30:ad:43:b1:99:86:6a:ab:9b:2d:1c:04:39:cc:6f:
a0:a1:e8:16:2a:e5:c4:91:d8:84:1f:8b:56:ef:cd:4e:60:3d:
e6:7d:6c:f2:fc:94:04:ed:75:49:34:4c:2a:d3:95:8b:ed:c8:
bd:5d:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:33 2025 by rpki-client