Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: 0KKOpW/uRkDR73uU5fAOKgMueG9hFLr+l1Pgxl8bdvo=
Subject key identifier: 28:27:4A:28:3E:AB:14:C2:10:67:26:C5:C6:EF:D5:15:96:AD:F6:1B
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 019928207E8A528FD52BAEE10CE17E82B889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 1679
Signing time: Mon 08 Sep 2025 07:00:42 +0000
Manifest this update: Mon 08 Sep 2025 07:00:42 +0000
Manifest next update: Tue 09 Sep 2025 07:00:42 +0000
Files and hashes: 1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: x11bKX/lKEpJlT9chGgzw6Yl98R4XNTpuuALTiceb7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:7e:8a:52:8f:d5:2b:ae:e1:0c:e1:7e:82:b8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Sep 8 07:00:42 2025 GMT
Not After : Sep 9 07:00:42 2025 GMT
Subject: CN=28274a283eab14c2106726c5c6efd51596adf61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:ca:dd:0d:68:69:cb:1a:e3:51:5c:f1:a1:
2a:1d:b1:2f:62:69:a6:d7:34:66:91:da:65:39:df:
e6:f2:46:0c:66:cd:c1:12:82:03:d1:8a:49:49:ef:
16:70:df:20:21:67:f2:0f:ed:db:28:4c:b5:dc:40:
2f:f7:f5:d9:57:72:f5:36:a9:b1:7e:5d:93:a2:85:
dc:a1:b6:c8:5d:d7:69:5c:6e:a3:4b:58:8f:42:d8:
a0:d9:9e:46:50:8f:bb:a6:92:23:db:59:91:2a:5f:
73:f5:97:16:85:06:bf:53:33:05:fc:88:99:50:7b:
64:75:be:d2:95:b6:d6:95:02:88:fc:d6:02:cd:bb:
4d:cd:2c:34:7e:75:41:8b:4c:17:d3:98:fc:88:e2:
4b:fb:47:f8:44:77:44:58:6f:9c:0b:7c:18:f3:f9:
08:43:ae:ef:de:8d:d4:33:98:b7:57:52:e3:bd:75:
27:44:36:0c:07:83:e8:b4:48:d1:90:dc:ec:0d:88:
e3:46:ef:51:0f:07:1c:5c:bb:b4:63:6a:c0:ee:a4:
61:6e:38:63:72:5e:3d:fe:38:f7:93:ae:17:1c:c6:
48:40:22:c4:98:49:68:01:87:f7:c5:2a:9f:2e:63:
62:a7:8f:88:6a:b1:8c:9a:5c:b8:a6:2e:6b:80:0c:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:27:4A:28:3E:AB:14:C2:10:67:26:C5:C6:EF:D5:15:96:AD:F6:1B
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4d:88:62:c9:4c:26:a6:f4:6f:ca:f6:a2:31:9e:20:f3:dc:
0d:66:09:73:9b:80:e4:cb:7b:e9:ce:56:df:4b:d4:30:ef:e2:
f4:67:82:65:db:63:ab:1f:d3:d1:be:f9:b7:b1:41:3f:43:19:
0f:6e:dc:8f:7f:e8:1d:95:65:45:74:54:6c:76:d6:f8:85:ba:
4d:b1:8b:3d:ed:08:93:3b:60:0c:3e:87:b9:46:90:71:ea:a2:
72:a1:e1:73:6d:73:a0:ad:a6:28:08:ca:e3:83:99:e1:ab:62:
f4:e1:73:5e:36:4f:1c:ca:20:b4:07:77:33:7d:21:5a:b5:b0:
6f:a1:c1:50:d3:80:51:33:16:26:ea:b1:f2:8d:d0:ec:0e:4a:
a2:a5:0b:4c:3e:32:27:1e:c3:6c:a7:da:60:75:1a:a6:bb:d6:
2e:e4:81:18:d8:13:a4:43:ce:3c:43:65:71:77:6e:ab:52:d0:
53:82:00:e7:99:53:6d:39:25:3f:26:3f:67:3c:91:6e:cd:6c:
69:0d:90:0c:2e:55:62:4f:5d:1d:ff:88:0c:57:8b:42:6f:59:
77:38:9f:7b:2d:b3:30:eb:59:a1:67:60:da:5e:bc:ed:e7:93:
9e:f7:1d:83:f6:6a:2f:0e:fc:2a:14:8a:4c:2b:08:48:72:a5:
c6:ef:a3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:15:38 2025 by rpki-client