Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: wO0dx2iwB32Tq/GE8sCVo8GkqBwJL4qgZTJYEQXGFsA=
Subject key identifier: 4B:6E:80:FA:DD:9C:FC:49:18:17:03:54:2A:A0:FF:D2:E1:22:13:4B
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 01987ED394BEDEC9B37DE4AE37F57D9F26A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 1016
Signing time: Wed 06 Aug 2025 10:00:52 +0000
Manifest this update: Wed 06 Aug 2025 10:00:52 +0000
Manifest next update: Thu 07 Aug 2025 10:00:52 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: PglMUJGf1xr5Who6V5JGncrD2PTnitI24kFBLZARIDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:94:be:de:c9:b3:7d:e4:ae:37:f5:7d:9f:26:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Aug 6 10:00:52 2025 GMT
Not After : Aug 7 10:00:52 2025 GMT
Subject: CN=4b6e80fadd9cfc49181703542aa0ffd2e122134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:12:02:88:62:ce:d1:47:64:44:c6:1c:e4:
26:0d:49:e6:15:43:ce:a9:02:3d:98:b1:6a:71:a2:
c1:48:a0:2e:a1:bc:a2:43:66:e7:de:de:da:de:65:
70:46:4f:a9:c3:74:32:97:e8:49:7c:97:fc:50:06:
78:6c:81:a2:d3:d1:92:04:46:4c:0f:86:df:7b:29:
56:3c:84:25:af:df:bc:ff:17:41:27:88:9b:38:ee:
9d:e5:39:92:d3:87:c4:38:17:4c:5a:93:af:2d:c8:
15:9b:74:01:ff:68:a2:0b:f2:d2:85:55:11:b9:a7:
ff:53:74:c4:e9:09:11:42:52:fd:3d:55:c3:af:be:
5a:3d:5d:bf:59:c6:73:1c:74:8b:db:7c:fc:76:74:
b0:1e:a0:6f:70:68:5d:09:ac:dc:76:5e:ac:e7:d6:
ab:a4:97:0f:9a:15:9d:a9:68:af:10:75:c4:e1:5d:
72:b6:ab:1d:59:c6:96:dc:b0:20:77:1a:8f:f8:41:
00:c7:05:57:95:5e:0b:4d:4d:3f:35:cf:fe:9a:4b:
3c:68:1a:e9:61:af:20:b9:9a:59:36:eb:dd:9b:3f:
06:75:50:da:bd:26:92:26:d6:66:95:68:39:ae:75:
a0:e3:ca:3a:87:d5:a9:ed:60:02:7f:4c:14:64:3c:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:80:FA:DD:9C:FC:49:18:17:03:54:2A:A0:FF:D2:E1:22:13:4B
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:53:c0:ba:91:0a:86:5f:bb:82:81:b9:a4:c0:f2:94:0b:0d:
5d:29:c9:03:5c:f2:dc:c8:a8:50:ab:02:46:96:db:87:c1:ca:
ec:d1:ed:9c:34:10:f6:db:61:75:3a:78:43:b5:ea:b4:e1:47:
bc:1d:02:6e:83:b0:ca:8a:af:b6:71:db:9a:22:e9:c7:2d:5c:
ef:23:78:d6:a0:d9:81:22:e6:d2:35:ed:59:f6:b6:bc:ed:08:
65:f2:16:c8:de:1b:30:0d:07:27:09:f0:b5:20:e4:fb:c2:38:
10:ea:3e:5a:8f:9e:74:87:59:d6:55:e8:ab:3d:0c:97:46:c2:
b4:c7:61:e8:b5:0d:1b:a3:d8:8f:60:d7:83:17:bb:aa:ef:c9:
53:95:d4:c7:e3:22:d9:d7:0e:dd:eb:2a:e1:48:7e:01:47:3f:
74:70:83:0f:1c:fe:68:1a:78:72:f9:45:65:72:40:53:12:3d:
24:a9:80:19:5d:e8:28:eb:40:b7:5b:9f:9c:c6:42:f4:a7:36:
f3:ad:58:bc:36:b3:2e:04:fd:55:d4:1e:05:72:fe:57:53:f6:
25:4e:72:1c:ae:22:ca:35:5d:b1:b4:74:9a:13:98:65:3b:3d:
78:25:31:d8:02:a9:96:f7:6b:79:b6:05:b7:c0:61:6a:95:56:
22:c2:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:48 2025 by rpki-client