Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: w6UCi2qQz64rcq9kNRdbc8AjSQcHpttaeAPicmukrzY=
Subject key identifier: FF:89:BE:63:A9:5B:E3:F9:55:E4:D1:E9:B8:3E:3E:F4:3A:E7:A2:CC
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 01987C40CF87B7AA8B4E271BD8BA76723B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 0173
Signing time: Tue 05 Aug 2025 22:01:18 +0000
Manifest this update: Tue 05 Aug 2025 22:01:18 +0000
Manifest next update: Wed 06 Aug 2025 22:01:18 +0000
Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: oH6N/F87e77NEF4aPknTsuxrP3P+PUOvUKkc2VbgV8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:cf:87:b7:aa:8b:4e:27:1b:d8:ba:76:72:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Aug 5 22:01:18 2025 GMT
Not After : Aug 6 22:01:18 2025 GMT
Subject: CN=ff89be63a95be3f955e4d1e9b83e3ef43ae7a2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:cb:b7:37:b0:22:82:97:04:9c:50:65:04:
31:7d:00:d4:98:6b:12:9b:34:33:72:d6:86:d4:e6:
dd:2b:69:ff:fb:de:98:c3:de:a9:d8:a3:78:50:0c:
00:54:78:70:8e:06:78:ef:05:0a:ac:5d:1f:eb:07:
1a:e1:e7:07:9a:09:63:41:93:f9:4c:92:1d:d6:c8:
f4:bb:6d:5f:f6:eb:b7:0f:46:48:04:b3:20:1c:fd:
98:39:3b:43:14:1b:94:b0:07:33:4b:d5:7a:45:58:
7d:3d:73:cd:00:97:6f:de:30:08:b8:d3:28:0b:fb:
9d:e7:c6:b1:0e:7a:4a:1c:be:80:1d:9a:31:9d:8f:
db:09:f4:9c:a6:e7:c6:6b:39:2a:e1:b1:e8:78:3c:
9c:4d:80:26:2f:08:12:4e:76:5d:3d:0f:3e:cc:fe:
56:3c:56:71:2e:db:71:db:2e:6b:09:1c:ec:51:76:
15:6b:11:bb:d3:4a:2d:ea:ff:23:81:ec:8d:7f:48:
fa:9e:50:97:f9:d7:cd:5a:68:24:f7:12:35:64:84:
9a:bb:cf:ef:82:42:2a:5b:12:97:30:13:f0:a3:04:
c2:da:ee:54:c5:f9:8c:65:1b:d7:9c:58:80:77:ef:
ed:3f:8a:5d:82:ea:a6:e5:6a:08:c6:e7:e7:31:44:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:BE:63:A9:5B:E3:F9:55:E4:D1:E9:B8:3E:3E:F4:3A:E7:A2:CC
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e1:76:43:c0:f1:8a:ca:b9:aa:1a:6c:f6:18:8b:41:0d:10:
9e:9d:dd:00:03:8b:20:b2:6b:cd:c2:65:f3:19:99:46:b2:eb:
79:70:64:0f:81:88:7d:04:d8:f4:bc:51:af:e2:7c:b7:7c:36:
fe:3a:85:fb:14:58:df:c7:d3:33:30:4f:88:db:1d:e9:73:0d:
09:db:67:be:0d:47:a9:89:29:45:e8:c3:2f:38:5a:bb:5e:e7:
9b:25:0f:e4:84:2a:71:6d:28:ab:c6:c4:2d:36:5c:75:f7:99:
d8:f9:31:6a:f3:2a:f6:f8:5a:61:bd:51:dc:c3:f3:77:a5:ff:
ba:82:92:88:a4:2e:02:2d:4f:42:f9:54:17:ca:8e:d9:d9:a8:
c4:f4:66:69:66:d2:c3:ed:0d:c7:03:bf:31:2c:d2:b3:a0:a9:
b6:8e:c2:cd:d6:bf:8f:cc:e8:dc:70:40:6f:ad:ac:f5:fb:fa:
3c:db:af:75:68:f3:a0:25:4f:cd:d0:7e:bf:0c:a5:5c:b7:e7:
9a:11:d2:d2:c6:60:a7:46:e5:1e:d0:b0:90:a8:fd:73:95:39:
45:80:13:cd:8a:71:dc:91:2b:fc:4c:d0:fa:5e:73:82:ab:c9:
95:7f:32:88:4b:48:56:1a:61:49:2a:c6:4c:82:3e:3e:af:e2:
8b:b5:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:17 2025 by rpki-client