Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: uxiYqPdTT0hd/mUhQhyf6xw/t/buMcIz3EroSARBdSI=
Subject key identifier: E8:69:50:72:DC:CD:02:E9:D5:DB:A4:4D:4E:3C:C0:9D:4D:A0:35:FF
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019931C8B41BC603625AE894DBFCE8AC3996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 04:01:00 +0000
Manifest this update: Wed 10 Sep 2025 04:01:00 +0000
Manifest next update: Thu 11 Sep 2025 04:01:00 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: fp/rj3twBagUXsV0zV1akUhXoxbAfs70CJLpWbsd+L8=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:b4:1b:c6:03:62:5a:e8:94:db:fc:e8:ac:39:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Sep 10 04:01:00 2025 GMT
Not After : Sep 11 04:01:00 2025 GMT
Subject: CN=e8695072dccd02e9d5dba44d4e3cc09d4da035ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:cd:dc:ad:2e:cc:32:91:12:f4:43:61:b0:
86:29:0d:a1:05:f3:33:86:0c:7f:58:f7:b0:60:81:
a0:f2:a2:e5:b7:34:60:d1:a1:ac:51:6d:74:60:02:
fa:96:f0:83:9d:7d:dc:6b:3f:e7:bc:a2:a8:a0:8b:
bf:8a:01:a6:20:3e:76:9d:9f:2f:02:36:11:46:71:
65:83:55:b6:8a:41:29:eb:51:61:4e:89:50:e5:7f:
1b:e3:06:80:9d:4f:3d:56:78:df:e8:63:44:fe:1e:
27:90:00:14:0d:d6:a1:bd:e8:37:8c:67:6f:74:7b:
5e:86:54:1a:3e:b0:6f:4f:b1:81:03:d7:76:fe:69:
d8:5e:bc:b4:3c:fb:65:bb:33:73:7c:73:51:87:5d:
b5:85:98:13:bb:27:63:77:98:fa:53:aa:dc:0f:fd:
76:f0:9b:8d:c7:3c:bc:32:d2:20:44:4a:72:15:36:
e3:f0:c6:7d:d9:0c:f5:8b:37:4a:61:03:73:43:bd:
d8:21:53:0c:7b:af:0e:9a:ff:7d:c2:1e:2e:77:e7:
04:56:4e:6f:79:fc:dd:3f:3b:d2:1c:fe:34:e7:3f:
79:7d:1d:62:22:de:9e:57:a3:9f:c4:8a:be:7c:59:
8f:20:0b:eb:c0:bf:1d:e3:2d:20:31:e9:78:25:20:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:50:72:DC:CD:02:E9:D5:DB:A4:4D:4E:3C:C0:9D:4D:A0:35:FF
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:80:30:17:c1:2c:2f:a6:f1:1e:2b:f3:8e:b4:3e:6e:80:a4:
88:8b:56:de:de:21:2a:f0:a7:6b:2e:19:87:75:59:ef:66:b9:
94:cc:de:4e:81:00:c3:16:85:28:e6:aa:bf:c6:81:76:3a:eb:
c1:bb:fd:a4:89:5d:ea:60:8b:ff:9d:21:3e:8c:53:b5:53:12:
a6:41:c9:24:26:1d:56:96:6a:ed:ab:fc:7e:9d:cc:b9:c4:83:
c0:2e:ca:16:23:e5:ce:42:da:7a:e2:05:06:29:d6:fc:9a:61:
63:14:8e:34:d9:cc:b0:72:f6:03:b7:e5:1b:3d:8e:2f:63:64:
4d:eb:fc:65:4d:7c:c2:ea:d3:23:eb:80:c9:ba:6e:01:73:14:
07:b4:aa:f0:5c:92:7c:28:58:ca:9c:43:6e:19:af:b5:8a:43:
e3:29:1c:a2:8b:39:ac:ba:e3:a8:4f:b3:7e:01:1c:fe:c3:b2:
00:1c:cf:99:99:89:0f:74:61:31:66:e5:69:0a:5e:22:48:f8:
e6:c9:ca:7d:03:7f:09:b6:88:b5:ff:dd:0f:0d:3b:0f:c9:15:
27:f0:67:5a:d9:b5:85:e0:e4:9d:12:dd:22:7b:b7:3d:eb:67:
fc:c0:e3:64:d8:c0:e6:78:1c:7d:d7:f0:72:51:2e:38:00:f0:
5b:20:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:33:58 2025 by rpki-client