Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: dd8S+3z2MnkLYm+M/6stYHADC9PlHrW7DH1XCQPV/TQ=
Subject key identifier: 0D:6A:82:80:BA:9D:B4:59:D5:91:79:BA:45:E4:5B:D2:5E:E5:6E:52
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01987DF8530A6F6961A841D64B21EFCD1716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 132B
Signing time: Wed 06 Aug 2025 06:01:22 +0000
Manifest this update: Wed 06 Aug 2025 06:01:22 +0000
Manifest next update: Thu 07 Aug 2025 06:01:22 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: PMFsw0t4mdOzurAm0wywZIMBmqaIXL2U5lO46Dde1nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:53:0a:6f:69:61:a8:41:d6:4b:21:ef:cd:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Aug 6 06:01:22 2025 GMT
Not After : Aug 7 06:01:22 2025 GMT
Subject: CN=0d6a8280ba9db459d59179ba45e45bd25ee56e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:7a:57:00:af:27:c1:b5:d7:c7:01:1d:95:
7c:de:92:ef:79:66:55:c3:d7:bf:20:f3:db:a6:dd:
93:9c:58:b0:6e:c1:00:2a:3f:24:fa:8a:22:cf:9f:
63:b3:3b:77:05:11:80:e1:6c:da:57:a1:61:9b:e3:
63:73:f2:17:1e:f6:a4:d9:fa:88:e0:86:28:a9:63:
2f:c4:0e:33:a1:d3:75:94:05:cf:b8:a1:1c:57:36:
c4:37:cf:59:e9:e3:26:63:19:cd:87:b1:db:c5:d2:
52:2d:87:67:05:6e:1f:90:f8:77:46:62:cf:d9:c5:
b3:c5:24:23:71:ca:25:81:94:06:a2:ab:8c:1a:74:
8e:d8:db:3c:82:f3:38:40:b1:37:09:37:86:79:eb:
b4:bc:80:24:6a:3d:b0:3c:d4:22:68:e6:71:62:c4:
f4:ee:c0:e3:6d:5a:a4:fb:89:14:e6:5c:6c:33:d9:
06:aa:31:dc:8b:fd:89:97:ed:f5:e7:fa:a6:4e:bc:
65:0e:33:80:21:5c:4d:7a:1c:f0:df:86:2b:be:61:
71:c2:8d:a1:44:d7:ed:5d:d5:f9:e4:c9:29:99:97:
66:08:96:83:41:98:74:26:8e:df:56:9f:cc:7b:f4:
45:25:f0:83:f4:b3:7e:62:61:76:d2:a0:a5:dc:ec:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:82:80:BA:9D:B4:59:D5:91:79:BA:45:E4:5B:D2:5E:E5:6E:52
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0a:11:4e:aa:8b:ca:d8:31:77:92:d5:4b:6e:1b:d7:bb:67:
27:c6:79:b4:4f:46:4d:f3:ec:20:23:10:d2:46:a9:d9:de:1d:
08:78:10:f7:3f:ca:5a:c0:ad:1b:33:68:f4:b6:a4:dc:b9:18:
8b:7e:f7:ad:aa:da:79:ab:06:c3:e4:52:8c:f1:5d:f3:25:16:
03:78:f3:92:28:73:47:29:35:64:2b:1d:a2:17:7a:66:98:77:
eb:89:2d:97:81:63:9a:00:b1:41:28:bc:1b:c4:aa:c1:a4:36:
1d:80:0d:be:12:bd:ea:70:b3:44:47:a3:76:f1:aa:4f:4e:4d:
73:ac:d0:c5:a7:4b:47:78:b9:2c:57:bb:be:e9:33:0c:86:c8:
48:22:16:a4:0d:fc:25:0d:46:85:9a:76:6e:9b:00:e3:fd:9f:
9b:b6:80:1e:ec:fe:de:85:69:a5:4d:19:2d:7c:b9:69:2f:a8:
ae:08:9a:d5:d7:ad:72:21:14:82:9b:17:32:3c:10:93:96:90:
87:27:2c:15:cb:0c:27:42:28:0d:8d:c2:7c:10:5a:68:04:20:
6a:9d:cb:01:7c:e0:7e:0d:d6:4a:87:20:f7:52:15:a7:d8:9b:
f6:54:c8:9c:6e:46:d3:b5:31:a9:8f:f4:4a:ef:e8:c0:bb:c1:
f3:c8:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:12 2025 by rpki-client