Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: M99JWdPVnFC7Y6Zg+bJ3tH972OqJnyCAILILUedgBKQ=
Subject key identifier: D8:42:6E:C2:57:DE:DD:ED:A3:06:1F:23:DE:A2:18:04:82:3C:A7:6E
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 0198C7C987655C60A8DECFEDF82E508E7DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 14C3
Signing time: Wed 20 Aug 2025 14:02:09 +0000
Manifest this update: Wed 20 Aug 2025 14:02:09 +0000
Manifest next update: Thu 21 Aug 2025 14:02:09 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: qJLeeRelksYbXDTcig2kSp5tkvLJ5p5ljRL2MIbnbOE=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:c9:87:65:5c:60:a8:de:cf:ed:f8:2e:50:8e:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Aug 20 14:02:09 2025 GMT
Not After : Aug 21 14:02:09 2025 GMT
Subject: CN=d8426ec257deddeda3061f23dea21804823ca76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:56:61:97:48:44:1a:d8:ca:af:bc:8f:02:
38:db:ce:0d:24:78:9a:b9:1a:47:7e:ab:20:7f:62:
e3:ae:2a:b0:67:0b:5d:fb:b0:71:07:b4:c9:9d:b3:
aa:82:19:f8:e2:0b:25:d7:2f:4b:a4:72:94:e9:5c:
f8:39:8d:85:2d:0f:39:e1:f9:2a:83:f1:cb:15:46:
a8:ec:38:eb:9b:85:dc:f7:c2:f9:44:17:b2:ae:69:
d6:7f:ff:a0:ab:49:45:cd:48:f1:94:27:0c:be:4a:
bc:78:a7:2d:83:78:68:4f:c3:82:75:e8:e2:8e:74:
e9:c0:3c:f1:57:2a:17:73:62:29:81:83:e9:2d:3e:
83:80:b9:41:0e:05:43:ec:dc:86:fc:f8:8d:87:4d:
29:44:48:56:a1:04:9a:b2:b8:42:c1:7c:6c:16:6a:
0c:ba:67:68:d6:df:dc:ee:a2:62:3b:c0:ca:5e:37:
c6:cf:9a:b6:39:59:d9:b0:40:b0:f0:b5:11:7d:5f:
1b:6a:ce:89:c7:bc:f4:39:9c:67:ce:ee:4e:8d:1a:
8c:16:55:a6:4e:ad:13:19:16:ec:c2:21:dd:4e:ca:
72:8d:e5:f7:65:33:29:50:d5:6e:fb:02:1e:68:aa:
f6:7f:40:2e:0a:94:fe:d1:e9:e2:30:6d:62:a8:54:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:6E:C2:57:DE:DD:ED:A3:06:1F:23:DE:A2:18:04:82:3C:A7:6E
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e2:6c:37:f6:7c:87:52:3b:86:5f:89:42:fc:24:7c:24:2c:
68:d4:49:4a:68:c5:b9:e0:ed:2f:c2:f1:37:d6:1f:ea:06:82:
d3:61:f0:a1:43:ee:e1:d8:2f:4b:9a:6a:55:2d:9c:85:f5:11:
13:c2:32:30:f7:7f:3b:9a:86:e6:76:4d:4c:ab:f4:b5:c8:ba:
8c:7a:12:65:13:7c:35:c8:bc:f0:78:9f:73:dc:74:d0:6e:c6:
23:65:66:53:fb:c2:98:78:fb:a6:4e:ea:53:ce:77:42:f8:b7:
68:0d:0d:d2:a7:25:54:1c:b2:2a:ee:f7:c6:79:ab:85:fe:5f:
7e:c6:72:55:79:11:b7:79:08:4d:ae:90:76:c6:0e:c8:ef:7a:
46:3f:a2:25:ff:11:eb:de:ca:02:9b:22:4f:52:87:51:78:f3:
de:cb:6e:74:b5:9f:87:63:eb:f8:0b:eb:7a:af:54:1f:7a:3a:
d9:68:2e:c5:b9:c5:9b:6d:e7:e0:e0:82:d9:e5:3c:10:3f:80:
9f:df:e4:87:58:ad:1e:36:06:fe:f3:df:77:03:3f:4d:ad:3b:
c9:43:24:c4:ef:53:86:dd:f3:61:a6:88:d0:3c:be:2e:95:53:
5b:3c:52:99:9e:69:af:57:4c:42:39:cc:7a:8a:83:0f:87:c1:
d2:dd:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:10 2025 by rpki-client