Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: zRINV3Ae+FPArsBdDa76264xfetjcostNly3eYKwGlI=
Subject key identifier: FF:4C:20:23:21:59:99:5C:97:57:26:57:A5:75:2D:BB:85:B7:BA:4D
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019922FA4F118E76E410501BE704322B85D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 1128
Signing time: Sun 07 Sep 2025 07:00:53 +0000
Manifest this update: Sun 07 Sep 2025 07:00:53 +0000
Manifest next update: Mon 08 Sep 2025 07:00:53 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: l50Yxw00nnY8GSVk4fsNjTrMQYDqjxTvPIRP3F3uuq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:4f:11:8e:76:e4:10:50:1b:e7:04:32:2b:85:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Sep 7 07:00:53 2025 GMT
Not After : Sep 8 07:00:53 2025 GMT
Subject: CN=ff4c20232159995c97572657a5752dbb85b7ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:f7:7f:40:31:64:43:cb:2d:13:3a:e8:92:
bb:9c:53:03:c0:62:30:8c:7c:0a:5b:43:37:48:34:
81:d4:cd:42:c0:b8:e0:ad:c6:5e:a3:50:57:ae:84:
0c:ba:17:86:1b:96:13:e7:f4:fc:97:75:a0:c7:aa:
d4:f2:d5:c4:03:b9:93:69:37:5d:3f:f2:a3:e3:11:
e6:e7:4e:e3:e1:7e:04:cd:69:ef:09:28:8f:b5:30:
a3:3c:fd:78:ff:6c:07:30:54:7c:11:02:1d:20:ba:
1c:5e:1b:81:96:37:9e:af:51:69:51:71:8a:5d:1d:
65:f3:3c:e2:a5:66:4f:1c:1e:ee:8c:d0:e8:b9:e7:
a0:a4:5a:18:62:08:5b:ab:0d:cb:50:3f:69:d8:ba:
a3:7d:b5:21:ac:65:77:62:77:6f:79:fd:9b:9f:80:
b2:93:3b:89:9e:6a:fe:63:47:7b:50:b5:58:ab:23:
67:ef:5c:25:08:d5:0e:92:39:e6:a2:f5:9f:28:aa:
43:d4:7a:aa:1f:0b:26:65:d1:e2:12:2f:1f:08:4e:
eb:0c:db:c6:41:76:8c:b2:d7:76:54:b0:da:3f:87:
f3:6b:79:b9:99:22:2d:65:8c:7e:cf:50:34:b9:15:
8a:8b:51:4e:01:23:48:f2:ea:9b:0f:8f:37:50:50:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:20:23:21:59:99:5C:97:57:26:57:A5:75:2D:BB:85:B7:BA:4D
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:db:70:64:ce:d1:08:f0:ab:bf:b1:b9:83:86:0d:2f:11:68:
2b:14:99:e0:75:8e:bc:d8:f5:39:ee:aa:cf:7a:5c:90:b4:14:
7a:20:55:3c:f3:b2:f0:ac:76:ca:5a:b8:0b:d0:11:27:ed:0f:
4e:fa:f8:f9:47:ef:4c:9c:28:a7:41:d9:ea:0f:31:0e:26:63:
98:9a:9a:35:8e:81:bd:99:7e:1a:92:5f:e3:b2:9d:b6:08:ca:
89:ac:d5:ee:88:c2:c4:db:f9:29:02:f1:ec:f3:28:25:61:c8:
1e:84:e2:c6:80:1c:4e:e8:d0:3f:b6:1e:d1:cd:fd:16:63:c8:
81:c4:27:ba:bb:73:6d:1c:f1:93:62:b2:e2:59:10:81:09:45:
12:61:57:fc:b9:f4:0f:23:36:e2:40:6a:d5:4c:dc:4e:57:db:
f9:bc:82:d0:1a:f1:22:1b:9b:5a:97:16:b6:f9:b7:69:a7:82:
6d:66:69:f1:f7:fe:f1:3f:39:d9:3a:d5:23:b2:74:4e:5d:12:
9b:29:e5:df:d4:82:5c:70:af:da:4c:98:57:1c:94:48:b9:40:
1d:68:20:30:b9:b9:5f:3c:d8:c6:4b:1e:4d:69:05:09:f7:60:
27:6a:d4:1c:69:6e:6d:13:c2:ff:7c:0f:0a:05:5a:8e:a2:c6:
c2:31:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:23 2025 by rpki-client