Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: pN7I1YpqhVgmUffT3glp6BQ6PDOK+NsXB6lKIIMYisw=
Subject key identifier: FD:60:5F:4A:5E:D3:33:75:C2:6C:98:4C:0C:12:71:18:58:41:27:06
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019855DEF0F16EC919D2EBEF834C1CF355B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 0261
Signing time: Tue 29 Jul 2025 11:08:50 +0000
Manifest this update: Tue 29 Jul 2025 11:08:50 +0000
Manifest next update: Wed 30 Jul 2025 11:08:50 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: Lv9xAfeyEgC3j97rAxtmN1mvFw0j3L6kdKcrZZ116yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:f0:f1:6e:c9:19:d2:eb:ef:83:4c:1c:f3:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Jul 29 11:08:50 2025 GMT
Not After : Jul 30 11:08:50 2025 GMT
Subject: CN=fd605f4a5ed33375c26c984c0c12711858412706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:9b:b9:08:b7:10:0c:35:b9:3f:07:4c:6e:
50:94:73:4b:66:7f:1c:08:55:45:4b:e8:b1:a6:04:
55:6e:c8:93:eb:e0:76:10:3e:ec:8b:c1:ca:10:e7:
02:dd:54:9b:00:5d:c0:94:13:94:e4:a4:25:e3:b4:
b9:46:a7:22:88:23:02:39:39:fd:a1:0e:71:26:33:
9d:ae:ba:23:19:89:12:51:0e:f9:c5:5f:ad:50:10:
fc:a6:a9:9a:93:9c:3e:67:44:2e:5a:9e:95:d1:03:
99:12:f7:b6:4b:20:c4:c2:b5:b9:31:b2:be:04:84:
d6:35:92:b3:2e:59:bb:5b:a0:cf:f3:ba:3e:22:04:
da:0c:b9:51:9a:9d:d6:53:a5:ae:79:d4:98:d7:1c:
b5:38:07:46:57:b0:c7:c3:d9:82:47:23:bd:12:32:
f4:d7:ea:71:94:0c:37:d9:a0:f7:c0:a6:69:3d:fd:
96:b0:63:9a:6e:d8:34:a8:73:f3:35:9b:96:31:35:
b2:f7:e1:95:b7:0b:b3:17:bc:10:67:3a:f9:77:bc:
69:9e:d2:fb:5c:44:16:db:3a:f6:ad:d3:1d:bf:92:
60:24:d5:bc:1f:2f:a8:15:e7:f4:cf:7c:ca:f3:97:
16:f3:62:1b:fa:aa:e5:36:3d:d8:de:11:20:93:da:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:5F:4A:5E:D3:33:75:C2:6C:98:4C:0C:12:71:18:58:41:27:06
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:1b:6a:0c:d8:5f:8c:32:1c:9e:98:58:8b:02:cb:bc:f8:
fc:3e:24:7c:ad:51:fb:c9:56:a3:21:4a:6a:99:32:fe:37:9c:
50:89:f8:ec:b1:2d:a7:1a:5a:90:0f:e0:f1:7c:93:41:56:36:
46:f7:4c:84:d6:1b:4b:d2:47:4b:6d:c5:90:d6:48:f7:ea:9f:
a3:85:00:56:38:c1:47:60:9a:62:90:ec:83:35:eb:fd:df:9f:
e0:49:30:af:d7:94:c7:1b:d1:3c:de:30:73:62:19:57:8b:68:
43:f3:4f:dd:22:f1:a9:cd:38:ad:76:e3:00:fe:f8:39:3e:b7:
22:3b:d5:0e:7c:f6:91:2f:9d:2d:fa:46:a1:de:21:12:aa:e4:
8e:81:5a:ec:37:54:64:0e:1c:fc:40:46:a3:98:6f:25:7d:24:
de:0d:48:81:36:67:3a:3c:da:5d:f7:9f:6e:49:bf:22:bd:38:
dc:1d:16:bc:54:41:0a:24:87:42:34:02:7f:a4:17:f5:4e:3d:
66:10:e6:5b:44:98:78:ff:66:53:f1:a5:2d:bb:48:04:90:43:
86:cc:78:53:98:ac:ff:ba:1b:68:04:92:5c:96:2f:92:2e:b0:
f6:1e:22:d0:5b:53:4e:ac:4e:47:af:54:6d:c1:3d:08:0c:68:
d1:d7:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:37:05 2025 by rpki-client