Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: pR5DoTezBTWMgHm+RQmo456UCAu12mxHaPVfXQpGTco=
Subject key identifier: 84:21:E0:6D:08:E2:58:03:48:DA:F0:B5:CA:1C:D6:55:C8:2C:3C:54
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 01991764679BCDDC98EB4702B8DB5847680C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 13AB
Signing time: Fri 05 Sep 2025 01:01:20 +0000
Manifest this update: Fri 05 Sep 2025 01:01:20 +0000
Manifest next update: Sat 06 Sep 2025 01:01:20 +0000
Files and hashes: 1: CGfUbuDeRkllwMZF7DTrKk3yLcE.roa (hash: l5jsvO9CwwUl92v3ODW6ImGh3DZFw7mx9nyyajWFi54=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: O5I/BGxYLGhUky42uf3GSGHyDpbFXxqA2r79stVbwbA=)
3: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:67:9b:cd:dc:98:eb:47:02:b8:db:58:47:68:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Sep 5 01:01:20 2025 GMT
Not After : Sep 6 01:01:20 2025 GMT
Subject: CN=8421e06d08e2580348daf0b5ca1cd655c82c3c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:09:f4:7c:b1:d4:b4:8d:a0:9d:ed:d0:00:
8d:13:2e:38:ee:43:2d:f4:c9:eb:62:c3:8f:6c:00:
b7:3b:44:c4:18:e0:e8:0c:7a:56:e3:56:04:88:dd:
ef:d1:5f:2f:6a:4d:97:5f:66:e6:16:86:04:83:79:
79:1f:5c:19:63:2c:10:34:2c:a7:6f:03:11:a5:05:
fe:39:91:3f:f9:b8:e8:84:fb:4f:07:ad:77:2e:5a:
c9:e9:d9:4f:a9:c1:dc:cc:40:f8:82:e0:26:32:9a:
7d:22:c6:c0:41:e4:61:16:2a:6a:8f:15:0d:a7:49:
b2:77:c6:55:b5:47:ca:cb:4e:e0:a7:ce:91:65:a5:
be:09:17:8b:9a:f3:ae:76:73:58:13:77:89:f9:6c:
56:35:3a:e5:4c:bc:9e:a3:ab:07:6e:85:47:8c:39:
34:fe:e8:f3:3e:43:76:62:47:17:86:f6:7f:61:f7:
0c:73:ee:24:dc:26:8b:5c:31:1e:52:12:3d:f2:67:
14:b1:11:87:c2:3e:6d:26:06:98:00:95:1b:b9:53:
5d:ec:74:db:f1:a0:0d:92:ee:63:6e:67:61:b0:03:
f5:3a:46:0b:2f:12:0d:d8:dd:d1:74:0c:f4:6a:8d:
a1:b3:6e:bc:79:7f:6f:7b:5d:14:b7:5b:0c:ec:6c:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:E0:6D:08:E2:58:03:48:DA:F0:B5:CA:1C:D6:55:C8:2C:3C:54
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ee:88:b9:9c:36:51:d4:36:b4:e5:3b:07:bb:52:5f:86:d8:
c6:ee:5a:fb:82:f6:0b:39:82:c2:4b:a4:fb:d5:c2:57:9b:b9:
91:4b:7a:d6:60:bf:23:c9:54:40:e5:7b:77:fb:c2:16:f5:07:
6c:df:2f:f2:7b:0d:80:66:87:fc:d8:dd:44:df:8e:bf:68:c7:
e9:ae:98:e5:a6:85:30:8a:aa:47:b2:1b:d4:6c:2d:b7:ca:d0:
c8:45:97:32:8f:b9:1d:2f:21:a2:ef:65:1b:85:07:fe:ce:70:
19:f8:04:c8:27:57:08:92:89:ce:71:22:df:16:b0:5e:6b:fd:
3b:1d:80:98:7f:4a:e8:80:9c:45:72:81:34:77:4a:77:34:7f:
c8:74:31:a9:24:33:27:da:e0:9c:be:51:7a:fa:bc:1a:cc:4e:
32:f7:c7:64:c5:3f:58:6a:80:2b:38:90:66:86:07:90:94:8e:
9b:bc:47:9d:ec:62:d5:63:60:fb:df:dc:75:fc:af:2c:50:c8:
a1:64:0b:b7:a9:fb:01:d7:fc:ee:af:0a:5e:c9:9f:3c:64:c7:
60:60:89:5b:75:9e:a6:e8:48:a7:ce:7b:89:7b:26:ac:96:98:
40:11:88:99:17:70:c0:f2:46:0c:84:3d:3f:fb:73:2b:e8:8b:
f6:67:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:52 2025 by rpki-client