Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: MyT6tPabskEzwIB9UStMtPW1iFs2wJRs2KuoR1Z/8cs=
Subject key identifier: 8E:EF:EC:16:8B:85:3C:63:31:0B:D8:5B:A3:D7:6A:44:34:88:51:82
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 019923A0FF9D313D285302A612FA39C0880B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:57 +0000
Manifest this update: Sun 07 Sep 2025 10:02:57 +0000
Manifest next update: Mon 08 Sep 2025 10:02:57 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: GXBcfwCQKYOaBHLDGrY/dN8R4WfZKj1uHxXcpRl2rQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ff:9d:31:3d:28:53:02:a6:12:fa:39:c0:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Sep 7 10:02:57 2025 GMT
Not After : Sep 8 10:02:57 2025 GMT
Subject: CN=8eefec168b853c63310bd85ba3d76a4434885182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:49:df:3b:78:ef:d7:6b:2c:a7:1a:f4:66:
43:68:13:9d:db:da:20:f5:57:bd:ff:ee:4e:42:df:
8e:6f:ad:f3:21:77:49:84:09:66:93:93:1e:d9:7f:
f3:57:e9:a4:bd:cf:d3:f9:35:be:ff:81:a9:9a:32:
d7:90:18:3d:64:ca:23:1f:4e:15:39:53:90:1b:5d:
b8:0b:32:35:e3:a3:73:4c:39:f2:4f:ec:01:8e:3a:
8f:10:e7:94:e9:bb:74:98:67:d0:62:3a:7f:f3:0b:
d0:c1:02:c1:18:cf:58:ea:a8:ba:46:ad:1c:dc:be:
b8:aa:1c:59:ca:4e:b8:ba:ef:4e:bc:f0:3c:40:f7:
c0:ea:08:af:8f:f5:39:7d:65:f4:1d:d8:a3:1d:7e:
85:da:1c:d5:5c:45:52:01:0e:36:a5:52:63:b3:44:
cf:a2:57:e4:e9:18:67:d8:24:fb:86:2d:58:01:53:
2c:77:0d:9a:33:03:05:5e:c5:13:44:96:92:eb:b3:
1c:9e:f7:82:a5:a4:f5:38:9e:c8:75:a7:50:d8:20:
e3:26:6c:78:7e:ec:a9:31:b5:e8:00:05:aa:ab:ce:
cf:04:44:ad:96:f6:9c:91:77:30:5e:8c:a3:b4:e5:
fd:43:82:d2:94:cc:02:1e:70:21:cf:a1:66:3b:96:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:EC:16:8B:85:3C:63:31:0B:D8:5B:A3:D7:6A:44:34:88:51:82
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:13:bc:ee:02:89:47:0a:05:9c:e0:ad:07:07:fc:fe:d3:8f:
3f:2e:aa:f6:d8:79:e8:d4:44:22:05:b7:98:d8:6c:07:d6:af:
3d:29:44:3c:fb:ad:14:69:eb:26:c0:0c:c5:f8:e5:62:a2:2b:
b4:e7:90:62:89:ec:7f:20:35:2d:11:44:bc:ac:92:69:89:c2:
8d:ae:09:f2:cd:7e:1a:dd:0c:1a:16:fa:60:9b:eb:21:b9:0c:
8c:cf:b5:a3:cf:c5:b2:67:98:79:62:9c:59:58:88:f8:af:41:
46:dc:a3:90:ba:4c:ef:90:4a:96:8e:f7:44:5f:aa:67:eb:1b:
0a:62:79:ab:66:49:58:95:61:e0:1a:52:15:ab:12:61:04:dc:
ab:6a:76:7c:80:10:52:f7:90:24:f7:3f:cd:d2:79:19:7e:e0:
11:5a:94:e9:6f:ac:56:d6:f6:16:cd:45:8f:f7:84:93:ec:0b:
08:20:97:94:25:05:c3:e7:db:03:76:dc:ae:b5:23:f2:d9:c1:
79:a1:05:8d:6f:1b:13:13:63:44:ba:0d:fa:c9:c9:29:8f:d4:
b8:01:59:13:00:eb:1e:e6:94:26:db:33:4c:a0:c2:15:e9:f9:
0a:2d:3f:2b:89:f2:91:37:ee:8c:81:ec:7d:64:85:d8:df:6f:
d8:a2:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:31 2025 by rpki-client