Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: q4N3k1TseqVOjqpE/xg4p4GDQgHbjw//6CrxhIp7ex8=
Subject key identifier: 47:71:8B:93:80:77:8F:CE:4F:3C:57:1C:5C:78:33:83:1A:40:13:EB
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 01983D60BF45EC87BAC7D0998510D13BA5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0A79
Signing time: Thu 24 Jul 2025 17:00:07 +0000
Manifest this update: Thu 24 Jul 2025 17:00:07 +0000
Manifest next update: Fri 25 Jul 2025 17:00:07 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: BfqZ5JRAWk1dRf22PpiqrO5wHEZ8p9j1j6tHE7PEGbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:60:bf:45:ec:87:ba:c7:d0:99:85:10:d1:3b:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jul 24 17:00:07 2025 GMT
Not After : Jul 25 17:00:07 2025 GMT
Subject: CN=47718b9380778fce4f3c571c5c7833831a4013eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:56:8e:08:f4:43:32:89:77:6a:66:e4:54:
8b:c0:c0:0f:49:df:26:af:a7:6b:05:8f:95:f4:2e:
9b:30:e3:da:1d:9f:b4:6c:cc:e2:a3:c9:17:b4:78:
64:bf:e9:b2:29:b8:68:ea:6c:90:02:d2:da:0b:ca:
e4:98:c8:62:83:cc:bd:a1:3e:88:6b:8a:67:bf:ce:
3c:bc:41:fe:4f:5b:1a:4f:ff:53:0d:32:95:24:b1:
b5:97:6a:59:47:cb:06:80:c4:5c:f4:fb:49:ff:da:
64:30:7b:70:17:7b:10:b3:8b:df:bb:15:e2:e7:0a:
b6:45:38:8a:8f:1f:50:ec:91:2f:21:ac:9f:55:5b:
ba:f0:ae:03:94:aa:77:59:3e:52:ec:bf:dd:eb:ca:
9c:32:51:de:cc:d8:d4:9c:ec:71:a0:eb:95:c4:c8:
65:e7:c5:05:be:73:da:27:bc:06:e3:b2:d1:c4:f1:
44:d1:42:9e:48:a2:c3:6e:50:50:54:a3:13:34:79:
9c:c2:75:5f:6e:68:12:1c:54:af:a8:93:de:90:ec:
8b:1c:c1:ab:42:9d:e1:66:58:6c:41:ad:ea:34:3d:
91:e8:26:be:a8:73:3c:cb:15:f3:c0:f0:29:c0:fd:
3d:20:ea:cb:f6:71:68:e6:4b:7b:59:35:b6:8c:7c:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:8B:93:80:77:8F:CE:4F:3C:57:1C:5C:78:33:83:1A:40:13:EB
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:3e:34:af:cc:44:65:60:d8:1a:d4:04:f2:45:3d:2b:ce:
77:90:fe:b8:64:56:e4:e3:f7:e9:cf:f3:7b:09:6c:bb:59:b0:
aa:a5:62:d7:af:f9:e2:f7:c8:ea:88:9b:09:bd:39:59:32:74:
aa:76:2d:98:8d:7e:73:3b:d2:f8:39:d0:32:bd:fc:1a:61:9b:
60:97:cd:2a:13:85:c7:90:19:17:d5:1d:0a:cf:06:c8:3a:01:
76:c0:a3:be:c6:6a:ad:1f:c9:e9:41:de:11:87:77:7d:54:b9:
6a:33:bc:dd:97:31:21:1d:7b:0a:9b:dd:be:52:40:5f:b0:2f:
1e:e7:f1:9d:94:72:1b:d2:17:71:10:c3:19:51:0a:e0:fc:9b:
5a:09:56:86:a8:85:a0:e2:4e:53:17:34:8e:09:2e:ff:34:59:
dc:23:3a:42:b7:5a:d4:7e:29:54:dd:23:b2:99:8e:8f:55:b8:
86:95:21:db:d4:ee:a9:f6:1d:9b:fe:09:b2:c8:4d:bb:4c:57:
03:ca:27:23:0b:eb:d4:47:d3:e4:cb:ab:42:c6:64:b0:51:24:
08:db:d7:1e:43:0f:47:11:e8:ab:53:41:66:fc:c7:95:3e:6c:
22:d0:51:d9:2c:9a:70:c6:4f:1e:fc:2d:35:f3:b4:67:9f:ce:
36:5b:12:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:06:21 2025 by rpki-client