Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: 7tiqtLpO8qt0/pRxnjb1wNMg/p9w+YqG7nqUOURpRII=
Subject key identifier: 87:C5:1D:CF:A5:F2:C6:A2:40:95:20:98:1A:C4:5E:8C:D2:BA:14:D8
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 019922C2EEA74F6848FB697BA148744852E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 1152
Signing time: Sun 07 Sep 2025 06:00:24 +0000
Manifest this update: Sun 07 Sep 2025 06:00:24 +0000
Manifest next update: Mon 08 Sep 2025 06:00:24 +0000
Files and hashes: 1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: 0xFaLoLQZX1iQbloUFO6DxjlH91hisrKe/wGEKa8pj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:ee:a7:4f:68:48:fb:69:7b:a1:48:74:48:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Sep 7 06:00:24 2025 GMT
Not After : Sep 8 06:00:24 2025 GMT
Subject: CN=87c51dcfa5f2c6a2409520981ac45e8cd2ba14d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:68:f5:5c:ed:25:77:b9:42:19:a3:82:53:
ed:fb:8e:fd:54:b4:26:f3:e5:e4:90:06:81:2a:e5:
41:1d:f2:79:a8:cd:a3:a1:10:b0:10:57:17:09:26:
3a:57:a7:c2:c2:c6:76:8f:9a:e8:3f:10:31:31:bc:
37:e3:16:65:c0:66:cc:8b:32:70:b1:20:40:f0:ff:
53:62:75:3c:1a:be:10:29:d5:c6:20:8f:d7:dc:5b:
03:d7:63:7b:3d:30:2e:64:af:86:19:14:21:7b:23:
fc:aa:a8:df:94:43:e2:28:ff:70:93:cb:cb:28:c0:
bb:b3:d5:26:2f:da:f5:3d:86:b1:7e:82:bf:3d:66:
0c:d3:40:5c:4c:d0:b0:81:9d:47:94:0f:cb:ac:f1:
2e:2d:a3:78:61:c2:9f:0b:54:b0:21:22:c4:21:bd:
c2:c5:16:c3:a2:28:4b:ac:b9:3a:8d:10:e5:71:43:
27:3b:af:40:af:41:1f:55:ae:11:54:87:d7:24:77:
11:13:35:ec:81:2e:f6:2d:a0:b2:5c:f5:6f:f8:3e:
56:38:44:ec:e8:58:9f:e5:90:70:c3:a8:d0:6a:72:
cf:c8:19:6b:fa:36:7f:3e:e4:dc:d0:fe:da:8c:c8:
fa:a4:39:7d:6f:79:fe:c6:10:6c:d7:51:b6:0d:41:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:1D:CF:A5:F2:C6:A2:40:95:20:98:1A:C4:5E:8C:D2:BA:14:D8
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:89:7a:83:6f:e6:b8:a2:3d:89:87:d4:81:fd:08:bf:78:
11:1a:b5:7d:1c:cf:c7:14:43:80:03:ee:da:f7:f1:b0:09:d3:
03:f2:9c:4c:83:00:61:a8:0b:53:0b:50:3e:ac:83:48:6a:f4:
56:36:e6:a2:71:e8:bd:96:58:4f:a9:4e:ed:a3:ed:08:1d:86:
f7:03:04:93:96:75:59:64:9d:7f:52:33:de:99:cd:03:c4:f7:
d8:49:6f:4a:ba:36:10:cc:29:e5:19:8f:bc:d5:f1:16:5b:d4:
91:8c:14:74:13:a2:b4:8a:27:7a:e4:45:0d:f1:b0:56:ab:dd:
e3:30:9f:cc:0d:1e:fb:95:c9:0c:45:cc:bc:d0:63:be:64:5b:
73:70:53:60:1b:41:83:52:12:63:f6:6c:09:1f:3d:fd:4f:dd:
f0:46:47:66:86:f4:e9:13:8c:13:bf:de:69:6f:c0:30:29:ea:
08:7a:2c:48:a6:d5:bf:61:f1:aa:bf:39:b0:36:9b:58:8d:51:
2d:2f:ed:f5:c3:a3:5f:ac:41:57:e4:24:13:ad:7e:07:29:dd:
f2:ee:65:77:d4:01:27:3d:09:8a:a9:0d:dc:65:8c:8a:4a:cc:
e8:76:0b:2d:e7:2f:81:3f:dc:5f:30:6e:a0:aa:f9:79:55:0b:
e8:d3:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:32 2025 by rpki-client