Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: 8eUxRI3KqICWib5lXZHwBKpalJeVYo7nE0tBfREj7yw=
Subject key identifier: A2:C6:1F:A7:A8:64:97:21:3D:E2:77:9A:ED:90:C8:B4:A0:80:3C:8E
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01984588F939012EB8F7ABE4429ADE0B28A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 08FA
Signing time: Sat 26 Jul 2025 07:01:01 +0000
Manifest this update: Sat 26 Jul 2025 07:01:01 +0000
Manifest next update: Sun 27 Jul 2025 07:01:01 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: wAVmHM2U+XmFu64Iskvw/YRWMZ++JL2iwcD7avtciwU=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:f9:39:01:2e:b8:f7:ab:e4:42:9a:de:0b:28:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jul 26 07:01:01 2025 GMT
Not After : Jul 27 07:01:01 2025 GMT
Subject: CN=a2c61fa7a86497213de2779aed90c8b4a0803c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:f4:20:17:c4:6d:5f:1c:d5:e2:20:14:4a:
b3:dc:e9:83:69:27:f8:f6:bb:c5:e0:9a:97:dc:62:
42:0f:c0:08:6e:2d:4a:94:08:3b:42:e8:3b:d2:42:
3b:9e:50:91:48:d1:f4:0b:94:94:16:41:90:49:a6:
9c:1e:fa:4a:92:8a:2f:ae:17:8d:3e:da:1d:75:6d:
58:7b:2e:f0:4c:51:c9:12:29:cc:8e:90:fb:be:59:
e4:cf:26:95:0c:d3:35:29:60:4a:1e:57:85:7f:8b:
51:aa:be:df:60:8d:eb:6d:70:3f:7a:e2:2b:41:5e:
69:40:a7:b6:5d:09:40:a1:2b:69:49:a8:b5:ed:0e:
e7:cb:fc:92:6c:1f:df:08:48:44:d8:60:17:55:f5:
58:c0:f8:e3:4c:ed:19:e4:32:47:4b:c9:58:47:1e:
18:1a:00:df:46:3a:1a:bc:fc:37:67:09:96:d1:89:
26:72:e5:f7:f4:b1:05:5e:36:d3:1e:05:e6:bb:24:
be:9e:a9:70:27:af:fd:76:a0:e1:74:05:c7:78:75:
03:e9:31:df:e6:87:08:0c:1c:f8:ea:32:6f:0a:ad:
66:5e:28:83:33:97:f8:53:e0:4c:29:b1:e5:a3:f1:
9a:66:e5:fc:f4:58:e5:e3:bf:8d:89:af:65:f9:58:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:1F:A7:A8:64:97:21:3D:E2:77:9A:ED:90:C8:B4:A0:80:3C:8E
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b0:f4:3c:fc:0a:17:09:fe:8f:bb:52:3f:22:12:0a:62:6d:
ea:2f:f6:12:6e:aa:e2:af:44:65:a5:f9:03:6e:8d:22:09:ef:
a8:d6:2e:11:d9:f7:e1:3c:99:e8:70:3b:90:bc:0e:be:5d:09:
24:81:18:b2:48:9d:69:11:4a:b0:9d:00:17:b1:3c:cb:91:2f:
a1:59:1b:75:aa:ca:3e:be:db:50:f3:49:e9:85:73:f8:c6:06:
61:ce:b0:08:3b:92:ac:07:d3:fd:a7:5b:99:c4:95:16:0f:b3:
97:cc:4e:ce:cc:6e:7e:72:04:ee:b4:65:ef:80:a4:44:9c:2c:
b6:dd:75:aa:08:17:9f:11:7a:43:5f:7b:71:68:52:77:f7:49:
3d:1c:be:1a:57:62:2f:a8:a6:6c:18:e8:fb:70:77:ce:6c:d9:
65:d1:fa:9f:f3:0c:c6:86:67:54:dd:a0:fc:3b:2a:14:59:94:
ca:f7:08:13:23:12:16:85:a4:de:27:fe:cf:1c:22:1d:23:67:
36:f4:79:07:cb:f0:bc:b9:2c:b8:1f:40:d7:70:72:64:51:ce:
f9:07:b3:72:e0:f3:cd:ca:05:52:99:5c:81:73:75:ba:1f:c8:
0b:c6:d4:f4:a8:09:c7:3f:8d:94:78:87:ef:dd:49:d2:76:54:
e6:71:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:08 2025 by rpki-client