Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: KgO5H0gndyHrtKAxMlAiFxjjWCBaWvgr31SjS86A6B8=
Subject key identifier: 3F:7A:C2:D5:44:FA:12:4A:03:8D:91:30:69:7A:6E:0B:64:66:CC:84
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01995AFB419CD439D8486BA6C2C4D95C0DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 1405
Signing time: Thu 18 Sep 2025 04:00:39 +0000
Manifest this update: Thu 18 Sep 2025 04:00:39 +0000
Manifest next update: Fri 19 Sep 2025 04:00:39 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: nsfQ+Q1uSBOqAuRnPLSdtNshsobiyUwBm8brMDonybE=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:fb:41:9c:d4:39:d8:48:6b:a6:c2:c4:d9:5c:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Sep 18 04:00:39 2025 GMT
Not After : Sep 19 04:00:39 2025 GMT
Subject: CN=3f7ac2d544fa124a038d9130697a6e0b6466cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:0f:22:99:c3:ff:26:ee:d7:c1:ba:40:a5:
4e:43:d6:be:7b:75:c8:99:1d:0b:b6:61:4c:77:d0:
cc:71:77:eb:77:4c:4e:2d:75:83:a1:57:36:fa:5a:
8e:f9:1a:96:f3:73:ac:3f:f4:86:af:f3:29:fc:f7:
37:d0:4c:28:86:4e:82:43:b8:f9:a2:c4:e3:16:61:
c4:29:b9:e0:6c:aa:2a:07:8f:fd:ba:5d:21:da:4c:
f5:9d:07:a8:a9:a3:b1:f1:a4:61:29:f0:89:fa:09:
39:65:71:74:02:03:40:b3:f8:01:17:d8:09:f0:f4:
bb:b5:20:c3:3c:e2:38:d0:00:6e:de:19:2c:ea:ab:
07:35:6d:8f:c2:e3:45:ea:ab:d1:b6:38:58:8e:e7:
ab:c7:f9:f0:1f:aa:eb:1a:b4:88:cd:66:f3:66:14:
33:de:93:a2:79:44:c7:ec:be:a8:79:41:dc:25:96:
c6:ca:03:39:f3:a9:65:44:77:32:21:d5:14:f2:e5:
20:67:12:35:b7:6a:70:7c:b1:85:39:f1:75:2a:c9:
77:82:90:ed:d7:94:97:5d:2f:74:8c:dd:50:f1:22:
b4:e6:21:60:02:1c:94:61:95:bc:99:8f:5f:cc:da:
d5:cf:5c:a8:fc:a7:2d:08:2c:9d:d8:4d:e9:d3:fc:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:C2:D5:44:FA:12:4A:03:8D:91:30:69:7A:6E:0B:64:66:CC:84
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:74:2a:d5:10:de:8e:9b:35:31:dc:fa:2d:92:ca:57:0e:30:
67:30:73:96:84:8c:27:7b:32:a4:b4:5e:8e:56:a2:45:5f:16:
84:c0:b4:09:66:5e:c1:d4:27:4a:c0:ca:38:4d:10:2f:08:72:
aa:1f:e7:4e:51:ff:1a:9d:9f:c0:a5:f0:c3:d0:c5:ab:05:9f:
04:b1:66:e0:80:c8:47:ed:cc:a9:a3:98:71:d8:50:40:d2:a2:
87:ca:bd:a9:1a:a3:54:d7:85:d2:09:20:1b:76:bc:a0:33:ca:
4a:d1:b6:17:97:eb:49:f2:07:71:64:41:5f:4d:4c:0f:d4:b2:
b2:1f:07:71:0e:44:0e:66:bc:49:54:81:09:57:68:20:7c:c4:
38:69:e2:d2:fd:4e:63:d2:6f:51:a0:71:1d:ae:15:f1:bf:33:
41:4d:74:4d:67:dc:fd:e2:0c:15:25:df:85:71:b6:a6:5a:c7:
7f:1f:60:bb:5b:cb:d8:f9:9b:43:3e:eb:d2:8b:09:50:42:a2:
53:83:a9:9e:17:fc:66:30:89:ab:2f:0f:c1:a0:c1:6b:d9:99:
5a:f8:4e:c5:92:04:6c:4e:b4:15:a2:e9:96:d0:54:c8:32:e6:
d1:cf:6c:b2:6a:65:b1:5c:36:8b:b0:3a:de:3a:26:33:87:44:
20:19:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:37:21 2025 by rpki-client