Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: zs7nIOom5yd5vXdiNquMg2xPD9epw4MHuSUexDfow+E=
Subject key identifier: E8:E0:EF:E8:82:9E:C5:34:7B:FD:BF:C6:CA:6F:E9:B1:69:C1:54:AF
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 019A0C01979BFE7D35A295D849F071B4D4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 174E
Signing time: Wed 22 Oct 2025 13:00:22 +0000
Manifest this update: Wed 22 Oct 2025 13:00:22 +0000
Manifest next update: Thu 23 Oct 2025 13:00:22 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: +FWsGAiF8VG8uhLwnLXtG7hcU2dc2jOlbL6eJu6pqTQ=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:97:9b:fe:7d:35:a2:95:d8:49:f0:71:b4:d4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Oct 22 13:00:22 2025 GMT
Not After : Oct 23 13:00:22 2025 GMT
Subject: CN=e8e0efe8829ec5347bfdbfc6ca6fe9b169c154af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:30:13:92:05:b6:cc:29:28:be:31:41:d6:
46:98:b7:68:e5:6b:dd:6e:25:5d:7b:30:16:9e:08:
49:bb:c9:a6:57:ee:41:07:f6:80:86:3f:dc:89:2c:
dd:60:28:49:52:fb:ee:b5:16:04:18:ed:e0:a5:cb:
85:32:5c:3a:f3:12:2f:6c:aa:a8:73:0d:7e:ff:82:
ed:0e:61:99:1f:60:65:c4:5f:c8:de:06:66:9f:d7:
68:28:f9:eb:4f:a9:4c:0f:c4:2f:a8:d5:69:8f:04:
f3:5c:4e:92:95:fc:fc:7d:4e:19:7e:96:54:b5:05:
c4:29:a5:de:54:81:26:13:16:66:db:ec:fe:f4:43:
f4:a3:f2:d8:95:e3:0f:66:01:68:bd:34:bb:cd:5e:
d8:a8:f2:e6:eb:56:74:81:55:f2:1c:61:9b:75:b6:
1f:f2:3d:d6:56:e0:c5:57:8d:cd:9b:58:d1:73:5e:
5a:08:d9:e0:8d:14:27:21:be:e6:05:85:2d:33:1a:
d7:6b:b5:36:5b:d9:77:b0:9c:f0:fb:b9:8d:f3:71:
69:6b:5b:76:a8:bb:57:bd:73:3d:21:ab:ff:e7:6f:
fe:a7:aa:3d:3b:2d:ce:a0:b9:80:34:74:94:19:02:
45:98:6f:6f:42:ab:18:a2:5e:97:7f:55:d2:50:89:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:EF:E8:82:9E:C5:34:7B:FD:BF:C6:CA:6F:E9:B1:69:C1:54:AF
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:07:d7:13:9a:2d:dc:3f:21:af:5a:18:f1:65:1a:bd:46:d2:
92:ec:4b:ce:2b:d1:ec:d7:85:81:eb:af:4c:ce:bc:cf:a9:02:
cd:08:d7:f0:36:40:b7:08:a7:cd:97:c8:86:38:10:0e:97:27:
9b:ba:82:0e:da:b2:ab:ce:d7:e5:91:91:e1:45:59:74:ec:4b:
84:1c:d8:15:c7:10:b7:17:93:09:ae:43:9d:6b:5c:a0:69:c4:
86:7a:e2:ae:64:8d:64:ee:ee:24:b8:72:bb:c5:8f:b8:5b:b1:
70:ee:18:9f:68:7f:b5:4c:02:4b:5a:c5:65:2d:69:78:93:8f:
6f:ef:59:90:14:05:4e:a8:ee:22:46:65:db:73:bb:13:ea:bc:
66:bf:a3:77:52:b0:61:f4:7c:27:1f:be:d4:6b:25:10:8b:c0:
52:f8:83:b8:db:de:06:14:6c:2a:e7:ed:5c:3a:db:a0:d0:e3:
0c:1f:e5:e1:cf:b3:5a:a7:2a:c7:f5:7a:79:2f:32:d1:73:ed:
2d:5c:bf:c7:9f:b9:d6:07:b2:cb:c1:fc:5f:4c:71:ec:97:78:
db:75:8e:36:05:41:2e:c6:2a:97:75:35:2c:50:13:fd:92:4d:
40:11:bf:fc:6f:0e:c1:43:09:3f:15:9b:7e:19:b8:b2:89:dc:
35:46:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:15 2025 by rpki-client