Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: PySBAVlBBjPjWJyBjJEgE4fpRVB722PZDF5StwfKQR8=
Subject key identifier: FC:77:58:79:56:FF:79:6D:7A:08:C9:32:CA:75:B4:A4:CD:9F:66:C1
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019849D3A5CDF81EED2EEC557EF7EDA1183E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 08C2
Signing time: Sun 27 Jul 2025 03:01:03 +0000
Manifest this update: Sun 27 Jul 2025 03:01:03 +0000
Manifest next update: Mon 28 Jul 2025 03:01:03 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: y8fAFqbLYy/hT8GFP3iIP5dAJ+t7tcuKF83Horqv2HA=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a5:cd:f8:1e:ed:2e:ec:55:7e:f7:ed:a1:18:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jul 27 03:01:03 2025 GMT
Not After : Jul 28 03:01:03 2025 GMT
Subject: CN=fc77587956ff796d7a08c932ca75b4a4cd9f66c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:f9:bb:f7:6c:14:cc:7a:06:16:78:e0:7e:
c1:2b:a5:17:c6:27:5b:b8:6c:67:67:c8:21:96:c6:
5b:b7:52:62:d4:3b:30:42:e0:c7:00:6a:6f:fe:bd:
90:0b:6d:53:e9:f7:fc:29:d8:c1:74:52:97:ed:e3:
b8:3f:da:02:a9:12:04:4c:55:d1:09:06:e0:37:aa:
a4:47:e7:ec:b9:d3:c3:32:ac:aa:d7:5e:f2:8f:ac:
c9:d2:80:32:74:83:01:0b:3f:ec:a4:46:a1:a0:5d:
de:ce:64:1a:e3:2a:d4:ee:b6:89:70:02:e7:8b:2c:
43:fe:dd:ea:de:d0:5e:9e:54:38:fc:ba:79:62:56:
a5:6b:33:91:78:19:c0:f7:95:e7:ee:f9:87:ad:69:
c9:4b:6e:c2:45:ae:52:32:85:d5:a9:85:f2:5c:e0:
1f:c2:2c:3e:27:bd:73:e0:1d:4b:3c:d7:b4:4a:75:
ab:e2:00:86:45:e6:24:df:bd:fc:92:ca:04:01:8c:
99:5f:92:fe:85:56:f3:cb:54:00:94:f6:17:93:cc:
7c:7b:56:88:ae:a4:35:64:e3:d8:45:bf:90:78:2a:
41:77:96:b1:c1:99:76:7d:60:0b:a1:85:87:5b:5f:
24:95:4c:11:93:d7:8e:f1:71:61:a4:da:9c:30:48:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:58:79:56:FF:79:6D:7A:08:C9:32:CA:75:B4:A4:CD:9F:66:C1
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cf:92:91:49:b5:15:5d:e8:ae:42:de:55:09:79:95:b1:95:
28:c7:96:c7:17:7d:ff:5a:82:08:c8:f1:1b:a8:40:4a:dc:09:
04:32:bd:5b:4a:0f:1b:a6:48:f5:5e:22:7c:f0:5a:05:76:98:
0b:de:ba:a1:fc:8e:48:d0:22:0e:b7:c6:a6:b0:a2:dd:4a:36:
f8:5f:0c:be:cf:c7:cd:0d:56:1f:ff:a8:e2:32:f8:06:0a:c9:
07:9a:52:f5:25:04:b1:73:64:af:21:75:4a:1b:21:8a:15:a2:
9f:e2:a9:f6:26:9a:7c:71:31:ff:4a:dc:87:97:ce:9f:2e:aa:
ae:d6:e4:51:f2:eb:2a:b2:2e:48:61:aa:f7:bb:05:49:c5:94:
17:c9:10:d3:2d:d9:75:79:ab:04:ad:4d:89:d7:b6:bf:ef:79:
ad:37:9e:d5:0f:4c:1d:98:dc:23:75:dd:56:3c:45:bb:a4:ee:
e0:cb:51:9f:d4:b8:fc:b7:4d:41:03:e8:48:b4:d1:8f:fd:55:
35:fc:4e:5f:09:ac:fe:41:c9:40:1f:3a:bd:10:83:ec:47:d6:
1f:f2:85:5f:06:32:38:c8:04:f5:01:71:3e:d6:6c:71:80:c5:
f8:16:73:b2:25:bb:85:89:18:33:84:e6:fa:de:de:01:89:97:
fa:5d:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:27 2025 by rpki-client