Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: mCDAyrb9tKBGfc6yNfRoz7YESRE4+lbZBI4vIRLA1xY=
Subject key identifier: BE:E2:0B:3A:5B:0C:73:C2:C2:A8:D6:1D:D3:47:E0:55:9C:28:E2:DE
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019853B202A9724E54599BE5C4FF9D41BC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 01:00:31 +0000
Manifest this update: Tue 29 Jul 2025 01:00:31 +0000
Manifest next update: Wed 30 Jul 2025 01:00:31 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: iU6KA9mxxz7HU5dmkfNBEXOYXVrxxcSlRrZuUG7ZmNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:02:a9:72:4e:54:59:9b:e5:c4:ff:9d:41:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Jul 29 01:00:31 2025 GMT
Not After : Jul 30 01:00:31 2025 GMT
Subject: CN=bee20b3a5b0c73c2c2a8d61dd347e0559c28e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:61:3a:e0:03:8b:ba:d9:b2:71:e5:04:ad:
1c:41:7f:83:fa:1a:51:6b:b3:7f:db:cb:92:5a:bc:
1f:ac:cc:b7:80:7c:cc:28:a4:1a:41:7d:a2:c6:75:
0c:59:46:95:4a:11:d2:e8:05:85:70:e6:3d:b6:95:
f9:4e:d9:04:c5:72:f0:29:f7:40:f2:27:e9:bf:d0:
4d:d6:b7:9f:33:cc:62:a1:c5:64:4a:9a:ce:f9:d7:
da:fb:8b:10:cb:f0:94:65:4c:80:d2:3d:d1:35:99:
77:d0:4a:a2:80:ff:7b:aa:00:06:1e:7a:8b:3b:7d:
72:d4:11:84:66:fd:b9:c0:76:d4:a2:5e:b3:23:97:
df:36:59:8f:fa:a9:d0:53:9c:81:ef:3f:a9:14:d3:
53:70:b6:37:b9:ae:79:43:8e:94:57:1f:f5:08:45:
12:69:14:a8:a6:f8:ce:a6:35:b6:a9:5f:d3:08:cb:
dc:4c:bd:0c:b2:db:46:6d:81:9d:9d:03:4b:3f:03:
9e:c7:bd:75:88:41:dd:7d:d6:78:1b:a6:8e:ed:5d:
de:30:01:d1:01:c6:f3:30:42:66:de:f8:5a:53:af:
fc:bc:ca:2b:b7:b5:97:cb:5b:49:f2:ed:6e:bd:28:
b7:99:f0:d6:43:b3:30:2a:99:c0:d3:b2:27:01:69:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:0B:3A:5B:0C:73:C2:C2:A8:D6:1D:D3:47:E0:55:9C:28:E2:DE
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a4:10:c6:b9:01:5c:d7:6c:a3:9c:35:84:71:4a:17:fd:87:
6e:11:83:f7:f6:d5:ef:0e:96:51:e9:aa:af:b5:af:0e:5d:de:
9d:bd:11:24:54:bb:5c:ef:9e:69:08:52:ee:a5:85:66:a1:90:
15:5f:ab:1e:e5:16:82:c1:d1:7d:3f:21:98:43:e8:d1:98:50:
c6:c1:6d:9c:ad:d8:88:e8:36:84:d9:ac:c9:9b:48:eb:5e:3b:
8c:56:4d:e7:1f:4d:93:e0:3c:11:e4:7d:41:f1:c4:82:70:7d:
7b:d7:cf:9b:c9:98:e9:fe:f0:4f:2a:f6:c9:35:f6:31:c6:f7:
d3:68:85:f2:8f:71:d1:51:36:48:d1:5d:c0:07:e5:d4:7e:c2:
4c:f2:a3:1b:e3:a2:b4:24:08:6a:0e:ba:5f:d2:b0:4d:00:09:
06:db:95:04:a6:3c:5b:c9:b7:2a:2a:df:ea:9d:70:b9:8e:f5:
dc:f2:18:ad:8c:da:13:26:02:75:e4:38:d4:fe:57:3b:95:13:
0e:bd:57:10:35:0d:5f:df:29:6a:3a:2f:e5:f9:4b:2e:9c:79:
85:44:c4:41:3b:72:8b:e3:b9:4c:0d:a6:37:33:c6:b4:4e:20:
4e:4f:0b:f9:b1:1b:da:f5:ce:f6:f8:6a:3f:8f:da:9b:f3:de:
e2:8d:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:15:50 2025 by rpki-client