Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: 4gCSGBXaWjmHcEI5mSv5BbSkKfx3wcJZ4zng9glF7YU=
Subject key identifier: 9C:D5:5A:A7:8C:CA:1A:C9:37:FF:C6:63:9E:45:90:26:02:2F:D5:2A
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 0198541FE9C4BD93F363019DD259B0B6F941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1598
Signing time: Tue 29 Jul 2025 03:00:34 +0000
Manifest this update: Tue 29 Jul 2025 03:00:34 +0000
Manifest next update: Wed 30 Jul 2025 03:00:34 +0000
Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=)
2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: psqhB7oh2njC8VrPagu3QVprPaTwf3lkBnqpnNEvgJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:e9:c4:bd:93:f3:63:01:9d:d2:59:b0:b6:f9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Jul 29 03:00:34 2025 GMT
Not After : Jul 30 03:00:34 2025 GMT
Subject: CN=9cd55aa78cca1ac937ffc6639e459026022fd52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:c7:a3:0e:fe:58:34:16:0b:de:e3:b0:3c:
d3:63:b1:76:e5:bf:c6:ad:4a:cd:83:30:43:50:4c:
ee:83:cd:c3:27:04:76:40:51:14:6c:b0:7d:50:ce:
62:d3:c2:07:70:70:33:08:bf:65:0e:b2:25:f0:17:
66:18:05:95:28:06:ca:04:f3:d2:65:85:5f:2e:d2:
77:1e:cd:a5:26:eb:e9:c1:d8:71:dd:f4:a5:f1:a2:
6c:62:99:28:c4:9f:5a:11:32:c7:68:d1:a5:4b:f7:
b2:4c:fb:22:05:fe:b8:04:be:05:5e:ca:46:f9:2c:
7d:cf:b3:1e:49:5c:f5:46:50:02:f0:0a:bb:f4:ef:
03:73:bc:15:38:16:a1:d9:cc:0f:67:18:aa:98:6b:
39:91:aa:c3:77:2c:d4:f8:be:82:40:fd:70:9a:97:
78:1b:f4:53:a6:01:48:ab:68:af:be:7c:b0:50:26:
6f:4f:d7:27:91:64:13:a7:76:7f:68:75:5f:88:93:
57:bb:fa:87:2a:05:a4:c4:53:5b:1e:21:a5:8a:a5:
20:9a:3c:55:d0:6f:8b:1b:17:46:d5:a6:49:99:dc:
1c:21:77:51:99:ee:6f:6a:82:f2:35:67:1c:f5:33:
06:db:c9:aa:95:99:2f:22:51:3f:e0:b8:e3:0a:74:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:5A:A7:8C:CA:1A:C9:37:FF:C6:63:9E:45:90:26:02:2F:D5:2A
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:79:e7:10:18:4b:ab:76:d0:43:eb:7c:c2:67:fa:63:36:5f:
b2:b7:4d:cd:10:6d:28:6c:77:52:8e:22:be:2a:0a:d2:6a:75:
19:e0:38:94:37:7f:b9:95:25:89:bf:61:5a:ce:3a:81:a4:34:
09:75:5c:02:f1:16:cf:3b:ed:21:8f:2b:39:96:54:90:84:fe:
e8:17:7f:e3:1f:d0:38:1b:64:21:23:91:ef:4c:e0:64:8e:57:
97:9a:e8:df:83:c7:b0:ab:c7:a1:ed:52:26:d4:7a:9f:9f:52:
8b:b1:ae:cd:57:9f:19:fe:cc:51:b6:cd:12:81:55:82:4d:91:
d1:ae:86:c4:4e:73:71:9a:19:8e:d6:7a:45:5f:03:3e:04:c8:
bc:cd:1d:d6:0d:e8:c4:f8:87:bc:0f:07:3d:8c:5d:2e:0e:ea:
41:e7:2a:f4:18:15:2f:15:d1:1e:b2:3a:6c:26:57:5f:39:e7:
09:09:c3:43:2d:e9:79:9f:69:12:0f:77:76:19:36:d2:e8:5b:
fc:03:8b:b1:d1:be:ed:da:5f:ed:60:23:f6:45:30:31:fd:31:
4a:22:2b:45:70:88:48:44:a3:65:5d:c2:a0:a2:7d:a8:6b:ae:
d1:71:75:a0:c8:c6:68:51:8a:35:bf:5e:0f:7a:2a:15:8f:5f:
a8:6a:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:23 2025 by rpki-client