Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: O+VMvXNKA4uS7FGhmkjZBpUHS/of6TBktBNQpF9gH7k=
Subject key identifier: CC:E0:AA:E4:B0:89:58:F0:A9:73:11:FB:95:B0:4B:24:B3:72:F8:9E
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 01992CD8BEEC60922635A3AAD5773AEF3DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0AF5
Signing time: Tue 09 Sep 2025 05:00:25 +0000
Manifest this update: Tue 09 Sep 2025 05:00:25 +0000
Manifest next update: Wed 10 Sep 2025 05:00:25 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: 1q/qreAFsU96G5UE1yBELzBkeBsP4PnV+rU1AhLgg/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:be:ec:60:92:26:35:a3:aa:d5:77:3a:ef:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Sep 9 05:00:25 2025 GMT
Not After : Sep 10 05:00:25 2025 GMT
Subject: CN=cce0aae4b08958f0a97311fb95b04b24b372f89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:03:9d:b6:98:6c:f8:32:6d:b1:df:d7:a6:
c2:fb:fd:ba:55:c2:6a:29:8e:fc:2a:63:b5:7b:14:
09:fa:59:7d:8f:0c:4a:ee:6c:b0:94:00:25:e3:26:
00:66:6b:2e:22:ff:ba:42:e6:c1:c4:10:b6:34:52:
a5:ea:c0:99:66:ff:85:1f:bc:fe:85:1f:2f:fd:2e:
a7:f0:56:98:f1:57:42:b6:82:c7:55:f6:78:27:75:
fd:67:bb:20:df:97:67:e2:6b:f9:3d:0d:cf:e7:9a:
8f:01:ee:4b:62:10:0d:0b:7c:f3:f0:47:04:54:b3:
24:77:d5:c9:3b:e3:cf:0e:4f:0c:d8:00:11:25:67:
27:1a:db:1e:6c:88:57:a2:d4:5b:66:79:b8:cf:85:
ac:73:af:70:ed:2c:98:72:5c:20:b4:b7:5d:11:64:
3d:db:2f:d2:de:be:5c:6b:18:c3:3f:bd:1e:56:97:
a2:a1:9f:20:12:47:0e:a9:ab:cb:79:f3:f7:7b:68:
67:fc:4d:81:74:41:12:d8:a3:b2:11:02:31:3d:71:
02:44:93:68:16:69:94:94:e6:0f:fb:ea:d5:2a:7e:
89:62:39:a0:13:fa:3f:33:74:ac:e9:c7:af:b4:c4:
3a:43:06:4c:24:95:40:46:68:ae:ee:ba:ea:ff:74:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:AA:E4:B0:89:58:F0:A9:73:11:FB:95:B0:4B:24:B3:72:F8:9E
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:6e:ed:3b:f9:9c:43:5f:a3:79:5e:2b:02:88:7a:af:c7:
c8:3a:13:71:b9:39:dc:cb:96:9a:59:0b:1d:fb:0a:a6:c2:67:
fd:f6:8f:cf:95:f8:d9:12:51:10:18:cf:e1:df:24:45:1f:b9:
e7:5e:09:2b:fe:65:32:c2:34:3d:59:f5:7c:81:9f:69:40:cd:
b4:62:e6:cd:7a:aa:37:b8:d2:52:e6:c9:80:c9:6d:9c:ee:da:
96:d2:84:46:04:a6:d8:9b:a0:2d:3b:88:04:10:47:bb:2d:ea:
eb:e1:a3:41:90:96:a5:4a:0b:ff:16:3a:ad:31:00:22:7c:9e:
a5:cb:dd:ee:7c:3f:4e:ab:4f:c1:2a:c3:1a:2a:1d:14:46:00:
f4:ed:5b:ed:96:e2:74:36:e1:9e:cf:12:4d:b7:3d:2f:6d:df:
64:cc:dd:57:c7:7e:63:b6:cd:f7:e5:ee:da:5d:cc:ef:3d:cf:
76:0d:83:d4:11:02:ff:36:81:71:11:c9:70:8e:6e:6b:18:73:
13:3b:9b:4c:9a:ff:81:03:12:cf:d7:1a:4a:0a:39:6a:45:3a:
db:4d:de:5f:58:85:18:58:6d:09:8d:e0:e8:a3:d8:c5:65:8e:
52:56:03:f2:7f:73:61:43:80:2e:82:f7:2d:8b:d7:6c:f2:2c:
55:07:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:33:22 2025 by rpki-client