Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: QR5Sub+Rm2Q18qYd5LhDVhbt2DPFIxkFZYD9mOVpARE=
Subject key identifier: E6:77:9F:6C:5B:59:8C:2A:1A:E0:42:43:A9:19:DD:A6:90:EE:E2:91
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01994D77A596A3B71EEF31BE6B277BF300AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 026F
Signing time: Mon 15 Sep 2025 13:01:50 +0000
Manifest this update: Mon 15 Sep 2025 13:01:50 +0000
Manifest next update: Tue 16 Sep 2025 13:01:50 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: OpJOAxiMrk7TMSYnUIL2NSFZA7LZLwwCq725NYGKFLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:77:a5:96:a3:b7:1e:ef:31:be:6b:27:7b:f3:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Sep 15 13:01:50 2025 GMT
Not After : Sep 16 13:01:50 2025 GMT
Subject: CN=e6779f6c5b598c2a1ae04243a919dda690eee291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:c2:f2:ec:52:2e:b3:97:81:01:58:34:c4:
e7:b0:09:09:bd:af:bb:8d:b6:4d:f8:74:68:d6:8c:
3b:78:c7:f0:22:68:82:91:6c:3b:02:12:93:f6:b5:
b6:68:14:6a:7e:86:de:19:29:49:f0:d5:8c:fb:05:
88:23:f3:40:e3:50:c4:e9:4b:f0:d9:0e:75:a2:2d:
52:ef:09:4f:81:30:53:a0:26:1d:57:c3:df:63:70:
6a:72:d0:a2:e7:66:67:d6:72:8e:3a:a0:2b:c5:f6:
ed:19:0b:8a:b3:32:9d:4d:c0:89:00:d7:27:12:ea:
ed:4a:a9:b2:2c:1d:b2:dc:be:42:f9:bf:38:de:cc:
24:e7:8b:21:a2:25:61:0f:61:5a:d8:09:77:b8:38:
30:91:8c:0c:fc:5a:28:43:64:35:b4:7d:b3:52:28:
29:d6:7a:33:09:02:21:ce:ca:a1:5a:bd:0f:a2:af:
26:3c:79:1c:5e:c5:52:4d:2a:66:a6:4f:9e:55:01:
03:03:cb:46:73:aa:b7:f9:a4:60:47:3c:e1:2f:ed:
af:96:7c:41:16:c0:b6:37:53:a1:c9:a6:86:9e:28:
40:b0:c7:84:a4:a8:41:0a:3a:87:15:ca:9c:cd:68:
3a:bc:89:bc:9c:be:66:70:2c:94:7a:48:16:de:73:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:9F:6C:5B:59:8C:2A:1A:E0:42:43:A9:19:DD:A6:90:EE:E2:91
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7b:5a:a8:9a:5a:de:18:de:97:d3:62:bd:7d:05:11:6c:c5:
88:c3:18:c0:cf:f2:c3:c4:fd:e5:32:57:8d:8e:e5:c1:11:b9:
f8:a9:df:89:03:44:e8:48:af:53:d7:b5:cc:18:e4:7e:f9:ec:
46:da:ea:4f:2e:fc:b6:a1:72:5c:62:47:80:b2:31:d4:e2:2f:
99:01:92:7f:86:c3:ff:f2:e9:48:5f:4a:c1:2d:75:83:2e:99:
07:20:36:1e:a6:12:98:ec:a2:3b:8e:28:b9:16:bd:e9:91:1b:
f0:26:f1:36:96:b8:28:bb:ae:da:24:8b:c6:4e:e6:9c:86:a5:
c4:00:55:16:81:f4:eb:eb:4e:f9:49:a6:8c:91:70:74:4e:b2:
ba:d2:e2:02:ef:b6:f4:66:9d:ec:08:61:70:86:80:aa:2a:6c:
b1:55:ce:46:96:85:df:85:74:7e:e1:b1:3e:8d:ea:91:ca:43:
71:3f:ca:2f:70:f5:6f:04:2b:2d:76:e3:75:a3:88:ce:56:14:
f4:45:2e:83:ee:89:2f:54:60:64:02:e5:e5:32:95:5a:8e:18:
d6:32:b3:68:fe:9a:8c:a4:57:61:a0:1e:ca:b5:51:29:37:46:
53:f7:77:b1:09:a4:07:47:1b:d4:60:e6:96:e2:a0:a8:d3:2d:
8f:8f:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 15:46:46 2025 by rpki-client