Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: t6e0CXQniAy8pG7EdFbvqJgWDjwYFGyDsqm/IlOdjjI=
Subject key identifier: DF:33:D5:29:72:B9:68:30:AF:47:00:96:84:CB:9F:BB:88:F4:3C:9E
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0199394BD7BB05D3262FBBB6507181611EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 093E
Signing time: Thu 11 Sep 2025 15:01:35 +0000
Manifest this update: Thu 11 Sep 2025 15:01:35 +0000
Manifest next update: Fri 12 Sep 2025 15:01:35 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: xk5FX1Bv6RcngYFjeL7ybcydxmoNhXH9IWGBWHQvCyY=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:d7:bb:05:d3:26:2f:bb:b6:50:71:81:61:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Sep 11 15:01:35 2025 GMT
Not After : Sep 12 15:01:35 2025 GMT
Subject: CN=df33d52972b96830af47009684cb9fbb88f43c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:4c:ef:3a:14:8c:dd:c4:a0:4a:7e:08:92:
02:50:bb:74:32:0e:fb:53:1b:c3:17:75:1f:4c:83:
0a:46:55:1e:96:dd:d8:93:9e:87:26:8a:bb:34:d5:
5a:7e:6a:ab:92:69:97:98:5e:77:33:11:08:1d:87:
79:d7:cf:cb:fa:36:e4:76:87:f9:6f:2b:18:7f:d3:
a9:58:69:2f:c4:fd:2d:9f:e9:65:93:16:00:4e:9e:
9e:53:6d:45:b7:96:09:03:31:be:03:fd:6b:fb:df:
f6:9b:82:c5:f8:56:bf:df:92:30:c9:60:6a:b8:ae:
c7:48:7d:27:78:c4:b0:5e:a8:a9:9b:97:fc:6d:95:
2c:79:1f:60:0f:88:c0:30:10:18:55:f2:15:6e:57:
07:d1:19:f0:00:9b:38:f1:5e:2a:ac:f5:c3:ad:51:
03:b4:cf:15:ed:d3:b9:65:eb:d0:5a:99:8b:02:dc:
36:92:c9:5e:d3:97:c9:dd:cb:b0:c3:7d:0a:6a:c4:
ca:c3:b0:ab:7b:84:5b:72:3f:bd:fb:f8:0d:4b:8b:
63:81:f3:a1:5b:32:4a:65:3d:d0:88:09:bd:21:e4:
89:d2:56:06:f1:44:c5:4a:f5:a4:76:89:d5:89:af:
71:67:fa:00:50:a3:c5:24:4f:fe:3f:53:39:0e:8d:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:D5:29:72:B9:68:30:AF:47:00:96:84:CB:9F:BB:88:F4:3C:9E
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d8:19:4b:5e:83:7a:0c:8f:96:c5:7b:74:1f:f0:a0:35:6c:
f5:2e:7c:9f:43:cd:98:ae:0d:fe:bc:97:86:f8:cf:e9:1b:99:
eb:3f:c3:35:82:a8:ad:72:2d:57:06:00:0a:c3:91:42:4e:f3:
db:c3:ab:89:b8:73:75:08:7b:39:d6:1b:18:af:37:ee:b8:1d:
70:8f:cb:ae:d6:00:33:1b:ec:58:dd:d1:38:d2:82:48:49:c6:
82:42:ee:e2:6f:be:af:bf:13:81:5a:ed:c0:e8:7f:55:7f:4c:
92:4e:bf:63:a3:cb:57:5b:12:ec:af:4e:63:51:73:8a:3e:29:
75:30:52:0d:c7:e5:c9:da:e5:a3:0e:96:66:0e:e0:3a:ba:8b:
d1:7b:9e:7a:6a:0e:e2:8b:e2:6b:e9:e9:8b:00:99:28:a6:c2:
f7:6e:31:40:5b:17:7c:19:83:21:c0:52:e5:d0:c1:b4:38:b6:
aa:ad:30:b3:b2:26:34:0a:a7:76:39:ad:c1:6e:5a:5e:83:8b:
17:57:f5:b7:40:a9:08:44:5a:c0:b7:4e:0b:b6:7e:ff:c0:37:
15:cc:c8:7f:8a:82:95:31:83:02:6a:8f:cd:b4:da:79:a6:d3:
ca:46:5a:26:16:45:db:83:2b:e3:a5:94:24:c9:84:be:0e:71:
e1:b7:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:31:58 2025 by rpki-client